KezNews.com
DownloadsOther NewsForumBlogsWallpapersJokewareSearch

News letter:


Enter Your E-mail:

Vista Growing to Match the Lack of Security of XP, Mac OS X and Linux

section: windows, for your questions: KezNews forum, 15.8.2007

    Recommended: Click here to check for outdated drivers

Microsoft has touted Windows Vista as the most secure Windows operating system available, ever since the debut of the Wow.




But the aftermath of the last company monthly security update cycle reveals that Windows Vista is in fact growing to match the lack of security delivered by Windows XP, various Linux distributions and Apple's Mac OS X. At the Financial Analyst Meeting 2007, Kevin Turner, Microsoft Chief Operating Officer, comparing Vista to XP, Linux and Tiger, claimed that the Redmond company's latest operating system is twice as safe as its predecessor’s.

According to Turner, Vista only accounted for 12 security vulnerabilities in the first 180 days on the market, while Windows XP had 25. Turner then emphasized the fact that Vista was also plagued by less security vulnerabilities than Mac OS X and the Linux open source operating system. Well, Almost two months later, Vista is doing its best to catch up. If the operating system was affected by just 12 security vulnerabilities in the first 180 days of general availability, in August, Microsoft patched no less than nine flaws.

Still, it is largely a matter of perspective. While the nine holes plugged in the August Security Bulletins release come with severity ratings of Critical and Important as the vulnerabilities allow for remote arbitrary code execution in the eventuality of a successful exploit on Vista, the fact of the matter is that only three flaws directly impact Vista. The remaining six vulnerabilities are associated with various components that ship by default with the operating system such as the Microsoft XML Core Services, Internet Explorer 7 and Windows Media Player 11.

And even the flaws in Vista are disputable. In this regard, the three vulnerabilities in Windows Gadgets on both 32-bit and 64-bit Vista can be connected to the Windows Sidebar and the items it integrates instead of the operating system.

"These vulnerabilities could allow an anonymous remote attacker to run code with the privileges of the logged on user. If a user subscribed to a malicious RSS feed in the Feed Headlines Gadget or added a malicious contacts file in the Contacts Gadget or a user clicked on a malicious link in the Weather Gadget an attacker could potentially run code on the system. In all attack vectors, users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights," Microsoft explained.

Ultimately, it is all a matter of perspective whether we consider the vulnerabilities in the components included in Vista flaws of the operating system or not.

source: news.softpedia.com

  >> Recommended: Click here repair PC errors <<

send email Send link 2 friend  |  Permalink
<< previouse article
Adding fonts to cmd.exe
next article >>
When You Least Expect It, Microsoft Spits Vista SP1 in Your Face

MORE RELATED ARTICLES:
Vista SP1 and XP SP3 vs. Mac OS X and Linux || Linux and Mac OS X Eat Away at Windows, Even with XP SP3 and Vista SP1 || Mac OS X and Linux Continue to Erode Windows' Install Base || Mac OS X vs. Linux - Red Hat vs. Windows 98 and Above Including Windows Vista || Linux and Mac OS X Killing Windows Bit by Bit

Comments(5)

Antivirus

By Kernel69 on 15.08.2007 - 20:08
i'm using vista utlimate since march without antivirus with a standard account & uac enabled...

Is this news?

By Jeph on 15.08.2007 - 21:08
anyone could see this coming....

ahhahahah

By fabianX on 16.08.2007 - 04:08
ahhahahah i want to see this match :d

Why wonder?

By Smarty on 16.08.2007 - 20:08
disinformation is the goal!

UAC FTW :D

By xp99 on 16.08.2007 - 21:08
yep, uac is what prevents this from being exploited and it can only do what the regular user can do without being prompted by uac. not such a big deal really. unless the user clicks ok when the uac prompt comes up.


No new comments are allowed for this article.

For your questions use our KezNews Forum