Microsoft to patch 17-year-old bug

February 8, 2010 by Lin Edwards report
Microsoft to patch 17-year-old bug

(PhysOrg.com) -- Microsoft's February security update will include a patch for a bug that dates back to Windows NT 3.1, which was released in July 1993. The vulnerability has been present but undetected in every 32-bit version of Windows since 1993, including Windows XP, Vista, Windows 2000, Server 2003 and 2008, and the newest version: Windows 7.

A researcher for Google, Tavis Ormandy, found several flaws in the Virtual DOS Machine (VDM) utility that enables more recent releases of Windows to run old DOS and 16-bit software. The bug has the potential to enable an unprivileged 16-bit program to gain system privileged access level to the PC, which would allow attackers to get their own code to run. Ormandy found the bug and reported it to Microsoft over seven months ago and published a workaround, but a patch has not been ready until now.

The 17-year-old bug affects only Windows 32-bit versions and does not affect 64-bit machines, which does not have support for 16-bit applications. Microsoft has released a security advisory, which says the company is not aware of any attacks involving the , and most users are at low risk, apparently because local access to the computer is required.

Among the 25 other patches included in this month’s security update are five “critical” vulnerabilities that could allow an attacker to hijack a PC running Windows and force it to run their own programs. The update also fixes bugs in Microsoft Office 2003 and XP, and Office 2004 for Apple Macintosh.

© 2010 PhysOrg.com

view popular send feedback to editors
3.4 /5 (8 votes)  

Filter


Move the slider to adjust rank threshold, so that you can hide some of the comments.


Display comments: newest first

Skeptic_Heretic
Feb 08, 2010

Rank: 5 / 5 (1)
The SETHC.exe bug is still around, even after this patch.

I wouldn't really say it's been fixed, just prevented from having network access.
axemaster
Feb 08, 2010

Rank: 5 / 5 (1)
I'm still waiting for the biggest bug to be removed from Windows... the BLOAT.

I would love if they could sell a stripped down version of Windows, where it supports graphics, but gets rid of all those useless services and processes that eat the computer alive. I mean, what does it tell you when a system from 5 years ago runs at the same speed as one from 2010???
Quantum_Conundrum
Feb 08, 2010

Rank: not rated yet
Axemaster:

I was just talking about that earlier today.

Excluding video games and maybe graphics editors and sound editors, a windows 95 system ends up running about the same speed as a modern system with modern OS...because the software keeps getting written worse and worse, with more and more "crap nobody wants" added to it...
KingDWS
Feb 08, 2010

Rank: not rated yet
I've been looking for something that functions similar to what you could do with the old batch files. Using one installation of windows something that would allow selective boot configs. For example one that allows max memi=ory and graphics but gets rid of network, encryption, print services etc etc. That might be for a game or using solidworks. There are sometimes when I want to run all of the junk but a lot of time have to spend a few minutes killing everything to max out the system. Someone figure this one out and they will come. I don't think most people realize just how bloated windows can be until they reinstall or use a differeant os on the same hardware. It can be a eyeopener.
Rank 3.4 /5 (8 votes)
Tags

vulnerability, virtual dos machine, security, windows os, 16 bit software, dos
Related Stories
more news
Relevant PhysicsForums posts
  • Calling function with no input argument
    created8 hours ago
  • Force free body diagram problem on gym equipment
    created9 hours ago
  • Empirical data regarding shower heads and water
    created16 hours ago
  • feed hold button on CNC lathe
    createdFeb 09, 2012
  • RFAC in Fortran
    createdFeb 09, 2012
  • dynamics 2/32
    createdFeb 08, 2012
  • More from Physics Forums - General Engineering

More news stories

Google users warned of threat to smartphone wallets

Users of Google smartphone wallets were being warned on Friday that there is a way to crack pass codes intended to thwart thieves from going on illicit shopping sprees.

Technology / Internet

created 1 hour ago | popularity 5 / 5 (1) | comments 0

Anonymous knocks CIA website offline (Update)

The website of the Central Intelligence Agency was inaccessible on Friday after the hacker group Anonymous claimed to have knocked it offline.

Technology / Internet

created 2 hours ago | popularity 5 / 5 (4) | comments 8

New error-correcting codes guarantee the fastest possible rate of data transmission

Error-correcting codes are one of the triumphs of the digital age. They’re a way of encoding information so that it can be transmitted across a communication channel — such as an optical fiber o ...

Technology / Computer Sciences

created 11 hours ago | popularity 5 / 5 (4) | comments 5 | with audio podcast

New power source discovered

(PhysOrg.com) -- Researchers at the Massachusetts Institute of Technology (MIT) and RMIT University have made a breakthrough in energy storage and power generation.

Technology / Energy & Green Tech

created 10 hours ago | popularity 4.8 / 5 (16) | comments 5 | with audio podcast

Small modular reactor design could be a 'SUPERSTAR'

(PhysOrg.com) -- Though most of today's nuclear reactors are cooled by water, we've long known that there are alternatives; in fact, the world's first nuclear-powered electricity in 1951 came from a reactor ...

Technology / Energy & Green Tech

created 10 hours ago | popularity 4.2 / 5 (10) | comments 19 | with audio podcast


Complex wiring of the nervous system may rely on a just a handful of genes and proteins

Researchers at the Salk Institute have discovered a startling feature of early brain development that helps to explain how complex neuron wiring patterns are programmed using just a handful of critical genes. ...

NASA sees wide-eyed cyclone Jasmine

Cyclone Jasmine's eye has opened wider on NASA satellite imagery, as it moves through the Southern Pacific Ocean.

NASA sees Giovanna reach cyclone strength, threaten Madagascar

Tropical Storm 12S built up steam and became a cyclone on February 10, 2012 as NASA's Terra satellite passed overhead. Residents of east-central Madagascar should prepare for this cyclone to make landfall ...

Putting the squeeze on planets outside our solar system

(PhysOrg.com) -- Using high-powered lasers, scientists at Lawrence Livermore National Laboratory and collaborators discovered that molten magnesium silicate undergoes a phase change in the liquid state, abruptly ...

The power of estrogen -- male snakes attract other males

A new study has shown that boosting the estrogen levels of male garter snakes causes them to secrete the same pheromones that females use to attract suitors, and turned the males into just about the sexiest ...

Grass to gas: Researchers' genome map speeds biofuel development

Researchers at the University of Georgia have taken a major step in the ongoing effort to find sources of cleaner, renewable energy by mapping the genomes of two originator cells of Miscanthus x giganteus, a large perenn ...