Vulnerabilities in some Microsoft's virtualization software, including Windows XP mode, a free add-on for Windows 7 operating system for users to run older applications in virtual machines.
7 months after notification to Microsoft, today March 16, 2010, security company Core Security has public information on vulnerability because Microsoft refused to patch it. Director of Technology Ivan Arce of Core Security said, Microsoft says it will patch this in the future for the Core that should patch immediately.
Microsoft confirmed that they are not considered a bug in Virtual PC, Virtual PC 2007, Virtual Server 2005 are security holes, but then get the Core, errors can help in overcoming hacker protection structures such as the Windows DEP (data execution prevention), ASRL , and attacks on Windows XP, Vista and Windows 7.
Mr. Arce admitted, with the public, the Core are pressured to Microsoft patches. Microsoft and Core said, Hyper-V technology used in Windows Server 2008 is not affected. And although OS client operating system at risk, the owner is not why.



Reply With Quote
Bookmarks