Report: Microsoft’s Windows Vista ‘security’ rendered completely useless by new ‘unfixable’ exploit

“This week at the Black Hat Security Conference two security researchers will discuss their findings which could completely bring Windows Vista to its knees,” Jason Kelley reports for Newwin.net.

“Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov, of VMware Inc. have discovered a technique that can be used to bypass all memory protection safeguards that Microsoft built into Windows Vista. These new methods have been used to get around Vista’s Address Space Layout Randomization (ASLR), Data Execution Prevention (DEP) and other protections by loading malicious content through an active web browser. The researchers were able to load whatever content they wanted into any location they wished on a user’s machine using a variety of scripting languages, such as Java, ActiveX and even .NET objects. This feat was achieved by taking advantage of the way that Internet Explorer (and other browsers) handle active scripting in the Operating System,” Kelley reports.

MacDailyNews Take: Microsoft Windows is insecure? Who would’ve guessed?

Kelley continues, “While this may seem like any standard security hole, other researchers say that the work is a major breakthrough and there is very little that Microsoft can do to fix the problems. These attacks work differently than other security exploits, as they aren’t based on any new Windows vulnerabilities, but instead take advantage of the way Microsoft chose to guard Vista’s fundamental architecture. According to Dino Dai Zovi, a popular security researcher, ‘the genius of this is that it’s completely reusable. They have attacks that let them load chosen content to a chosen location with chosen permissions. That’s completely game over.'”

Kelly reports, “‘This stuff just takes a knife to a large part of the security mesh Microsoft built into Vista,’ said Dai Zovi to SearchSecurity.com. ‘If you think about the fact that .NET loads DLLs into the browser itself and then Microsoft assumes they’re safe because they’re .NET objects, you see that Microsoft didn’t think about the idea that these could be used as stepping stones for other attacks. This is a real tour de force.'”

Full article here.

[Thanks to MacDailyNews Reader “Wingsy” for the heads up.]

Boom! Yet another reason, as if you needed one, to Get a Mac.

90 Comments

  1. Well, given the difference in OS architectures, say, between Windows and OS X, I highly doubt something that brings down Vista will have the same effect on a Mac.

    At best, exploits on the Mac are very localized (affecting only Safari/QuickTime etc), since accessing the root is essentially not an option, and the fact that registry modifications need user input beforehand.

    The Mac can only be fubared by the user themselves, at the end of the day.

  2. I was concerned about the statement at the end of the article…

    “These techniques are being seen as an advance that many in the security community say will have far-reaching implications not only for Microsoft, but also on how the entire technology industry thinks about attacks. Expect to be hearing more about this in the near future and possibly being faced with the prospect of your “secure” server being stripped completely naked of all its protection.”

    Are we sure we are immune from this?

  3. If they knew in the early 1990s what we know now about what Windows has become, would business still have chosen Windows?

    Some companies don’t allow iPods, memory sticks, floppy drives; they lock the airwaves with encrypted wireless, restrict access through VPN, change passwords monthly, run 5 apps for virus, firewall, spam filtering, anti-phishing, etc yet still allow Windows. I just don’t get it…

  4. @Wings2sky

    I’m sure Apple are more than aware of any threats as you mention. However, the most important word in the article piece you highlighted is ‘possibly’.

    Fear is a very powerful tool. ” width=”19″ height=”19″ alt=”wink” style=”border:0;” />

    And remember, UNIX has a much better security advantage over Windows ever will.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.