Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Win XP SP2 kernel bug

Win XP SP2 kernel bug

by Nikola Strahija on July 20th, 2005 Security researcher Tom Ferris of Security-Protocols discovered a bug in XP's kernel that might be used by hackers to crash even fully patched systems with Windows firewall switched on.


The vulnerability comes from a flaw in Remote Desktop Services. A maliciously constructed RDP (Remote Desktop Protocol) request might be used to mount denial of service attacks but Ferris said the bug doesn't lend itself to injecting hostile code into vulnerable systems.

Microsoft has confirmed the vulnerability but says the risk is limited to denial of service attacks. -We have not been made aware of attacks that try to use the reported vulnerability or of customer impact at this time, but we are aggressively investigating the public reports, it added.

Nonetheless security alert notification firm Secunia rates the bug as "critical". Seperately, Secunia last week also posted info on another Windows XP SP2 security bug. It warns that a flaw in a Windows Network Connections Service component (netman.dll) also poses a denial of service risk but this is only applies to local users not remote attackers hence a much reduced security risk.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »