Author Topic: Microsoft Advises Users to Disable Windows Gadgets  (Read 158 times)

0 Members and 1 Guest are viewing this topic.

Offline Bugbatter

  • Microsoft® MVP
  • Administrator
  • Diamond Member
  • Posts: 7062
Microsoft Advises Users to Disable Windows Gadgets
« on: July 11, 2012, 11:01:21 AM »
Microsoft Advises Users to Disable Windows Gadgets Following Security Vulnerability Fears

Microsoft is urging Windows Vista and Windows 7 users to disable the Sidebar and Gadget features of the operating systems. Vulnerabilities in Gadgets could allow remote code execution.
http://technet.microsoft.com/en-us/security/advisory/2719662



Microsoft MVP - Consumer Security

Offline Bear

  • Malware Removal Mentors
  • Global Moderator
  • Gold Member
  • Posts: 2154
Re: Microsoft Advises Users to Disable Windows Gadgets
« Reply #1 on: July 11, 2012, 01:23:31 PM »
Any idea if the huge group of patches released on Windows Update yesterday fixed it?
Never interrupt your enemy when he is making a mistake.
- Napoleon Bonaparte

Offline 1972vet

  • Microsoft® MVP
  • Malware Removal Staff
  • Diamond Member
  • Posts: 8290
  • Patience is bitter indeed, but its fruit is sweet.
Re: Microsoft Advises Users to Disable Windows Gadgets
« Reply #2 on: July 11, 2012, 02:01:56 PM »
It is odd that they'd release a security advisory on the same day they release the security updates lol...
I also wonder why a fix is necessary. Wouldn't disabling it from within the control panel do the same? I sure would think so.

edit added:
My gut instinct tells me this relates to those gadgets downloaded, not those native gadgets that came with the O/S. I would think Microsoft would have said more about it than:
“We’ve discovered that some Vista and Win7 gadgets don’t adhere to secure coding practices and should be regarded as causing risk to the systems on which they’re run”
...otherwise it might have read just "gadgets", not "some gadgets". By my thinking, it's the nicest way of alerting the public of some shoddy coding of something that Microsoft should have done themselves. Just watch...when this is resolved what they do with regard to the downloading of over gadgets from unknown developers.
« Last Edit: July 11, 2012, 02:09:56 PM by 1972vet »
Disabled Veteran
U.S.C.G. 1972 - 1978
Membership: U.N.I.T.E., A.S.A.P.

2009-12

Performance and Maintenance for Windows XP, Windows Vista and Windows Seven

Offline Bugbatter

  • Microsoft® MVP
  • Administrator
  • Diamond Member
  • Posts: 7062
Re: Microsoft Advises Users to Disable Windows Gadgets
« Reply #3 on: July 11, 2012, 03:34:03 PM »
Quote from: Bear
Any idea if the huge group of patches released on Windows Update yesterday fixed it?
I didn't see it listed in the patches.

Quote from: 1972vet
My gut instinct tells me this relates to those gadgets downloaded, not those native gadgets that came with the O/S.
 :AG


Microsoft MVP - Consumer Security