First Windows 7 Zero-Day Exploit Airs, But Danger Isn't Great For Most
November 13, 2009 9:15 AM
Problems with SMB have persisted since Windows 7's RC phase
Windows 7 is arguably much more secure than its predecessor, Windows Vista, with
more robust memory protections
against attacks and with the wide availability of Microsoft's free antivirus suite,
Microsoft Security Essentials
. Many possibly exploitable vulnerabilities were found and removed during the unprecedented public testing phase as well.
However, challenges remain for Windows 7. A recent report found that the OS's UAC was less robust than Vista's and allowed
7 of 10 pieces of malware
to be freely installed. Now, following Microsoft's monthly Patch Tuesday a familiar problem has returned.
The Windows SMB (Server Message Block) protocol has had problems ever since the discovery during the OS's public testing phase of a
supposedly show-stopping bug
that could, according to some sources, cause Windows 7 to blue screen. Now another SMB bug, which throws Windows 7 into an infinite loop forcing a reset, has reared its ugly head.
The bug was publicized by researcher Laurent Gaffie on the
Full Disclosure mailing list
Tyler Reguly, Lead Security Research Engineer of security firm nCircle, the vast majority of home users are unlikely to be threatened by the bug. The bug's main route of attack occurs when you type in the IP of a server in the search box and accidentally navigate to a Windows Share on a malicious server. As most casual users are unlikely to have a clue how to navigate to server shares or even know what server shares are, chances are they won't be affected.
The vulnerability applies to both Windows 7 and Windows Server 2008 R2. Currently there are no reports of attacks in the wild, but proof-of-concept attacks have been aired. One key thing that makes this bug unlikely to be largely used by hackers is that it is unable to grant any sort of system access and can, in essence, only be used to create annoyance -- forcing the user to reset their machine.
It is also extremely easy to block external SMB traffic to rule out the chance of it swamping your machine. Simply block ports 135 to 139 and 445 on your router or firewall and you'll prevent external SMB traffic from entering your system and potentially causing harm. While this bug seems relatively harmless, given the history of problems with the SMB since the test candidate phase, it seems a good idea to put these blocks in place if you don't need to use SMB traffic to external sources.
Even if you block the ports, there is still a remote chance that you could be affected, via viewing a webpage in Internet Explorer. States Mr. Gaffie, "There is an Internet Explorer-based attack vector. By including a file stored on a share in the HTML of the web page the flaw can be triggered. But, once again the result is a denial of service."
Using Firefox, Chrome, Opera, or other third-party browser may help negate this route of attack.
Microsoft is currently investigating the bug. It bills Windows 7 as its most secure operating system to date and has committed itself to fight tough in the war against malicious users.
"When an individual makes a copy of a song for himself, I suppose we can say he stole a song." -- Sony BMG attorney Jennifer Pariser
Sophos Finds Windows 7 UAC Fails to Block 7 out of 10 Pieces of Malware
November 5, 2009, 2:03 PM
Microsoft Security Essentials Now Available
September 29, 2009, 11:50 AM
With Exploits on the Way, It's Critical Win 7 Testers Run Tool to Safeguard Their PCs
September 21, 2009, 9:51 PM
Windows 7's XP Mode Cripples Malware, Gives Attackers Headaches
September 14, 2009, 8:30 AM
WhatsUp with WhatsApp?
August 29, 2016, 5:23 AM
Fuchsia – Google’s New Open Source Operating System
August 17, 2016, 6:30 AM
Windows 10: End of an Era & A New Beginning
August 1, 2016, 9:59 AM
Free Windows 10 offer ends July 29th, 2016: 10 Reasons to Upgrade Immediately
July 22, 2016, 9:19 PM
Quick Note: Whoops, Microsoft Pushed Unwanted Windows 10 to Some Users
October 15, 2015, 9:04 PM
Quick Note: Windows 10 Insider Preview Build 10565 Fixes Boot Camp 6.0 Issues
October 13, 2015, 11:39 AM
Most Popular Articles
Problems with Windows 10 – Update Now
October 15, 2016, 7:30 AM
Comcast Fined $2.3 Million for Trumped-Up Charges
October 13, 2016, 5:00 AM
IBM – Cloud Object Storage Cheaper than Amazon S3
October 14, 2016, 5:00 AM
Paralyzed Race Car Driver Recieves Nevada License
October 12, 2016, 5:00 AM
Researchers Move Closer to Breakthrough Gene Therapy to Cure Sickle Cell
October 14, 2016, 5:00 AM
Latest Blog Posts
T-Mobile Data Problems
Oct 20, 2016, 10:17 AM
Annoying Apple Watch Problems and How to Fix Them
Oct 20, 2016, 5:00 AM
Your Mail May Soon Be Delivered By Robot
Oct 19, 2016, 9:34 AM
2018 Jeep Wrangler Prototype Sells At Junkyard
Oct 18, 2016, 5:00 AM
Samsung Shines with Gold Edition Tablet
Oct 17, 2016, 9:24 AM
Tesla Hints Mysterious Product Debut for October 17th
Oct 16, 2016, 10:14 AM
Samsung Galaxy Note 7 Phones on US flights
Oct 15, 2016, 5:00 AM
Comcast Fined $2.3 Million For Unconfirmed Services Charged To Customers
Oct 14, 2016, 5:00 AM
“American singer / songwriter “Bob Dylan is awarded 2016 Nobel Prize in Literature.
Oct 13, 2016, 10:33 AM
Battery Defect in Medical Device
Oct 12, 2016, 5:00 AM
IBM Bolsters Social Services Sector With Technology Grants
Oct 11, 2016, 5:00 AM
Scientists Sound Alarm on Climate but US Still Toys With Skepticism
Oct 10, 2016, 5:00 AM
IMEX America Trade Show
Oct 9, 2016, 10:00 AM
Phone Wars – Google VS Samsung Free Gifts on Purchase
Oct 6, 2016, 5:00 AM
Member of Parliament’s opposition car exploded in Tbilist capital of Georgia
Oct 5, 2016, 2:52 PM
US Government Cuts Cord On Internet Oversight
Oct 3, 2016, 10:34 AM
Are farm children less likely to have allergies and asthma in adulthood?
Sep 30, 2016, 5:00 AM
MH 17 shot down by missile 'brought from Russia' into Ukraine's rebel territory
Sep 29, 2016, 5:00 PM
More Blog Posts
Copyright 2016 DailyTech LLC. -
Terms, Conditions & Privacy Information