Langsung ke konten utama

Serious Windows 7 Flaws Unearthed

Microsoft announced on Tuesday that its newest operating system Windows 7 can be vulnerable to users in terms of code execution and denial-of-service attacks. The vulnerability of Windows 7 and Windows Server 2008 R2 has been discussed before Microsoft issued the advisory. Although, the company claims that no attack due to this Windows flaws has been reported so far. The flaw was found in the Canonical Display Driver (cdd.dll), which is used by desktop composition to mix the Windows Graphics Device Interface (GDI) and DirectX drawing.

Microsoft also thinks that chances are high if an attacker can successfully exploit this vulnerability, it can result the affected system to stop responding and automatically restart. The company assured that they are going to fix the problem once the investigation is complete. By this time, affected Windows 7 or Windows 2008 R2 users should disable the Windows Aero Theme to prevent the issue from being exploited.


Code execution, while possible in theory, would be very difficult due to memory randomization both in kernel memory and via Address Space Layout Randomization (ASLR). Additionally, this vulnerability only affects Windows systems if they have the Aero theme installed; Aero is not switched on by default in Windows Server 2008 R2, nor does 2008 R2 include Aero-capable graphics drivers by default.

Please, follow the steps to disable the Aero theme:
1. Click Start, select the Control Panel, and then click on Appearance and Personalization.
2. Under the Personalization category, click on Change the Theme.
3. Scroll to the bottom of the listed themes and select one of the available Basic and High Contrast Themes.

source : http://blog.taragana.com/index.php/archive/serious-windows-7-flaws-unearthed/
Label:

POPULAR

Kerajaan Jeumpa, Kerajaan Islam Pertama Nusantara

Teori tentang kerajaan Islam pertama di Nusantara sampai saat ini masih banyak diperdebatkan oleh para peneliti, baik cendekiawan Muslim maupun non Muslim. Umumnya perbedaan pendapat tentang teori ini didasarkan pada teori awal mula masuknya Islam ke Nusantara. Mengenai teori Islamisasi di Nusantara, para ahli sejarah terbagi menjadi 3 kelompok besar, yaitu pendukung (i) Teori Gujarat (ii) Teori Parsia dan (iii) Teori Mekah (Arab). Bukan maksud tulisan ini untuk membahas teori-teori tersebut secara mendetil, namun dari penelitian yang penulis lakukan, maka dapat disimpulkan bahwa Teori Mekkah (Arab) lebih mendekati kebenaran dengan fakta-fakta yang dikemukakan. Teori Mekkah (Arab) hakikatnya adalah koreksi terhadap teori Gujarat dan bantahan terhadap teori Persia. Di antara para ahli yang menganut teori ini adalah T.W. Arnold, Crawfurd, Keijzer, Niemann, De Holander, SMN. Al-Attas, A. Hasymi, dan Hamka. i Arnold menyatakan para pedagang Arab menyebarkan Islam ketika mereka mendo...
Posting Komentar
Selengkapnya...

MyWare: Personalized Service or Invasion of Privacy?

There's a fine line between what is considered a knowledge database and an invasion of privacy, and that line is likely to be determined by marketing. This week we wrote an article about Please Rob Me - a service that identifies Foursquare and Gowalla check-ins on Twitter and lets others know that a person is not home. While location-based services are often touted for their social and recommendation-based benefits, the realization that they can be used negatively have many questioning the responsibility of those groups that collect the data. In mid January Facebook founder Mark Zuckerberg stated that the age of privacy had come to an end and we responded that evolving preferences were not a valid justification of the elimination of privacy preferences . Nevertheless, between cookie tracking and browser identifiers like those shown in the EFF's Panopticlick and the fact that it only takes your zip code, gender and birthdate to identify you, it's hard to ensure to...
Selengkapnya...

Johnny Depp Meninggal Hanya Hoax

Aktor Johnny Depp jadi trending topic di situs jejaring sosial, Twitter. Penyebabnya karena Depp disebut-sebut telah meninggal dunia. Benarkah? Ternyata tidak. Bahan perbincangan para pengguna Twitter didasarkan dari screenshot situs berita CNN yang disebutkan dimuat tahun 2004 silam. Screenshot berita itu pun sebenarnya telah dinyatakan sebagai kesalahan teknis oleh CNN. CNN ketika itu mengaku telah lalai dalam memuat nama korban kecelakaan lalu lintas menjadi Johnny Depp. Padahal yang menjadi korban saat itu bukan aktor top Johnny Depp. Sejumlah situs berita asing yang selama ini dikenal memiliki keakuratan dan kecepatan berita pun tidak memuat mengenai meninggalnya Depp. Situs BBC, Reuters, Contact Music, Female First, Daily Mail, The Sun hingga CNN tidak melansir berita meninggalnya pemain film 'Donnie Brasco' tersebut pada Minggu (24/1/2010).
Selengkapnya...