Vista’s Security Rendered Useless

      by Wyatt Walter

Security researchers Mark Dowd and Alexander Sotirov discovered an exploit on Windows Vista that bypasses all the memory protection Microsoft has been bragging about for Windows Vista. The vulnerability uses IE or any other browser to load content into “any location they wished on a user’s machine using a variety of scripting languages, such as Java, ActiveX, and even .NET objects”. The big problem here is not that this is a bug in the implementation, but rather a flaw in the logic Microsoft used to write the protection around Windows Vista. Other researchers have said that there’s not a lot Microsoft can do about it, and it basically means “game over” for Vista. The next few days/weeks/months should definitely be interesting in how this plays out.

Related Posts Related Websites

Filed under Uncategorized : Comments (0) : Aug 8th, 2008

Leave a Reply