Image-handling flaws put Windows PCs at risk

TalkBack 14 of 91:

Next »

« Previous

• Thread View
• Flat View

Wait just a moment...

Most of us had a LONG argument/discussion/no rules cage match yesterday on this very same subject in regards to the Linux worm issue.

What I would like to interject here is, didn't anyone learn anything yesterday?

Yesterday, an old, already patched, insignificant possibly exploitable problem is identified on Linux. The MS crowd goes wild. But wait, that exploit allows for the possiblity of a backdoor.

Fast forward today, a very similiar situation exists, but this is only a 'flaw'? What was that again?

The linux exploit requires three seperate software packages to be installed and running. The software has to be older than a certain release, and to properly fulfill it's intended goal, the worm MUST be able to exploit all three issues at once. If one of the packages are different, or if two have been patched with the newest code then all bets are off and the worm exploit is ineffective.

Again fast forward, we have here today a known 'flaw' in windows that affects the OS through graphic file types. This 'flaw' gives instant root (administrative for you MS guys) ownership of that box. And like the Linux software, this has already been patched. However this is an OS core process, wherein the Linux exploit is software only, unable to touch the core OS.

So I guess what I am confused about is, how can an 'exploit' of Linux software, that requires very specific packages to be installed under just the right conditions that does not allow root access be called an 'exploit', when a Windows 'flaw' that allows complete control over that box's Operating System be muted to the word 'flaw'?

We're all intelligent. I, like most here, have an extended degree from an accredited university, but for the life of me I do not understand how one is an 'exploit' and one is only a 'flaw', when the 'flaw' allows for potentially more destructive abilities...

***as a disclaimer: absolutely yes, I am a Linux person make no other judgements about that. In my opinion it is the best OS in the world. I understand that MS people have their opinions as well and BSD'ers too, as well as MAC folks and the like.
This is not a flame, this is truely a want for an honest explaination. If you can interject thought-inducing comments, they are welcome, trolls can move along...

Posted by: yourkiddingright   Posted on: 11/09/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now