Ads by TechWords

See your link here
Receive the latest technology news and information.
Microsoft
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

.ANI attacks took swipes at Vista's security

But first OS cuts probably not the deepest in this case

April 24, 2007 12:00 PM ET

IDG News Service - Microsoft Corp.'s Vista operating system took some of its first punches when a dangerous vulnerability was disclosed earlier this month, but the OS held strong, a security analyst said Tuesday.

At least two exploits were targeted at Vista, trying to circumvent a new security feature designed to thwart malicious software attacks, said Mikko Hypponen, chief research officer for F-Secure Corp. at the InfoSecurity Europe in London on Tuesday.

Microsoft issued an out-of-cycle patch for the vulnerability, which occurred in how Windows processed ".ani" or animated cursor files, which allow Web sites to replace the regular cursor with cartoonish alternatives.

At least two exploits tried to take advantage of the vulnerability, by skirting Vista's Address Space Load Randomization (ASLR) security feature, which varies how the OS's memory map looks each time the computer is booted, Hypponen said. The feature can confound some malicious software programs, which need to run in a specific part of the computer's memory to function properly.

Both of the exploits attempted to circumvent the feature and insert themselves into memory. Neither worked and merely caused the computer to crash, Hypponen said.

A Microsoft security executive said he was unaware of specific animated cursor attacks against ASLR, but it shows that Vista's security is working as designed.

"I'm happy they [F-Secure] showed that it works," said Roger Halbheer, Microsoft's newly appointed chief security advisor for Europe, the Middle East and Africa.

The animated cursor vulnerability is especially dangerous since a machine could become infected if a user just views a malicious Web site. It was the third zero-day vulnerability Microsoft had patched off schedule since January 2006.

Vista is likely to come under increasing attacks as it's more widely adopted, Hypponen said. About 3 percent of U.S. consumers are currently using Vista, with about 79 percent still running Windows XP, according to recent statistics cited by Hypponen from Harris Interactive Inc.

Vista's security improvements mean a machine can be connected to the Internet in its default configuration without any third-party security products and be fairly protected, Hypponen said. But just as security vendors had to revamp their software for Vista, so will the malicious software writers, Hypponen said.

"Unfortunately, it will change, and it will change for the worse on the Vista side," Hypponen said.


Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Jump to comments

Microsoft Corp.'s Vista operating system

Additional Resources

EFD vs. HDD - What You Need to Know
WHITE PAPER
Enterprise flash drives provide a new Tier 0 storage layer capable of delivering high I/O performance at a very low latency. Proper use of EFDs in an Oracle environment can deliver increased performance compared to fibre channel drives. Read the recommendations for identification of the best DB components for EFDs.
Gartner Research Report: Magic Quadrant for Application Delivery Controllers, 2009
WHITE PAPER
The market for products to improve the delivery of application software over networks remains dynamic and innovative. Vendors focused on solving enterprises' most-pressing application problems have become the top players.
Eight Criteria for Server Load Balancing
WHITE PAPER
Server load balancers are a simple yet highly effective means to scale an application environment while ensuring its availability. Today's solutions should also address application performance and security. Read about the top eight criteria you should consider when choosing a server load balancer and how Citrix NetScaler meets those requirements.

What People Are Saying

White Papers & Webcasts

The Workday User Experience Video
Watch Workday's Creative Director, Scott Lietzke, discuss the business-centered design philosophy at Workday.

Business Process Framework Demo
Learn about Configurable Business Processes and Calculated Fields. Watch Now!

Manager Experience Demo
Go beyond self-service solutions to perform more effectively. Watch Now.


IT Jobs