The Microsoft Tax: Windows zero-day flaw exposes users to code execution attack; Mac unaffected

Apple StoreRyan Naraine reports for ZDNet, “Microsoft’s Windows 7 operating system is vulnerable to a new zero-day vulnerability that exposes users to blue-screen crashes or code execution attacks.”

“The flaw is confirmed on fully patched Microsoft Windows 7, Windows Server 2008 SP2, Windows Server 2003 SP2, Windows Vista SP2, and Microsoft Windows XP SP3,” Naraine reports.

Nataine reports, “Microsoft is investigating.”

Full article here.

[Thanks to MacDailyNews Reader “Dale S.” for the heads up.]

31 Comments

  1. Steve Ballmer, are you plugging the hole in the screen door on your submarine again? Why? There will be another then another then another … to find. Too many leaks. This sub is going down!

  2. occams razor, they have a PC vs Mac site? Is their a link? I need a good laugh somedays! It would be great.

    Finally, Microsoft is filling a real need in society.

  3. @occams razor

    That site is a classic. I particularly like the “Having fun” and “Simplicity” sections. Did you know that “the mouse works differently” on a Mac?

    @Jersey_Trader

    There’s a link on 9to5mac (I’d feel dirty posting a link here).

    Expect an MDN story soon, with some great takes.

  4. what about PDF code execution attack on the 100M iOS devices ?
    PC and Android not affected, never seen that here !

    I am an Apple fan, user and shareholder but MDN sometimes is so blind to Apple’s problems it loses all credibility to “normal” people !

  5. @Nicu

    As soon as Apple has problems that are as frequent and profound as Microsoft’s, then we’ll talk. And by the way, to properly troll, you have to start your post with “I’m an Apple fan, but…”

  6. @Nicu – the difference is the iOS PDF deal is one you have to go load the PDF. This like many Windows flaws requires no user action, the machine just blue screens. Unavoidable – Windows just goes toes up. That’s brutal.

  7. @ occams razor

    Funny funny stuff.
    Eg:
    “If you use Apple’s productivity suite, sharing files with PC users can be tricky. Your documents might not look right and your spreadsheets might not calculate correctly.”
    I love that twist on logic.

  8. Yawn… Since service pack 2 – which was released several years ago – there hasn’t been ANY widespread virus/attack on the PC plattform. Ordinary users aren’t affected. The horse is dead, no reason to keep on kicking it.

  9. Yep – I follow a client on twitter who has posted nothing but frustrations for the last 3 days. Posts like ‘still battling the dreaded windows virus”.

    As always – the answer is – {drumroll} – Get a Mac!

    3 days – I mean really!

  10. @PcGuy

    It’s a zero-day exploit so how do you know you aren’t infected? That’s the thing about Zero day exploits, no one knows for sure, the extent of its reach, or who’s infected.

    The AV industry hasn’t even announced a definition update, much less the scope of the vulnerability window, and from what I read, ALL Windows users are susceptible at the moment, and depending on the attack vector being deployed, your PC could suffer a harmless crash or it has been pwned already.

    Just because you see yourself an ordinary user, doesn’t mean your last crash wasn’t virus-related.

    The point is, with zero-day, you just don’t know.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.