Microsoft Security Advisory (2506014)

Discussion in 'other security issues & news' started by ronjor, Apr 12, 2011.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,145
    Location:
    Texas
    https://www.microsoft.com/technet/security/advisory/2506014.mspx
     
    ronjor, Apr 12, 2011
    #1
  2. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    This update was part of the Windows Update pack this month, but I'm curious, is this to patch out the exploit discovered a few months back regarding bypassing Kernel Patch Protection?
     
    elapsed, Apr 12, 2011
    #2
  3. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    From http://blogs.technet.com/b/srd/arch...g-the-risk-of-the-april-security-updates.aspx:
     
    MrBrian, Apr 12, 2011
    #3
  4. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,145
    Location:
    Texas
    Looks like it was added to expose rootkits so, possibly.

    http://msdn.microsoft.com/en-us/windows/hardware/gg487353.aspx
     
    ronjor, Apr 12, 2011
    #4
  5. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    elapsed, Apr 12, 2011
    #5
  6. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    Dermot7, Apr 16, 2011
    #6
  7. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    Sorry, what I'm understanding is that MS don't rate 32bit as affected, so what's the best course of action?
     
    Dermot7, Apr 16, 2011
    #7
  8. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    32bit Windows doesn't have Kernel Patch Protection so is far more vulnerable. This was patching a flaw in KPP.
     
    elapsed, Apr 16, 2011
    #8
  9. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    Thanks, it's just from what I'm seeing on Softpedia seems to say that 32bit users can benefit from manually installing, yet it can't be availableo_O
    I must be getting that bit wrong or something, thanks a lot.
     
    Dermot7, Apr 16, 2011
    #9
  10. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    As far as it explains the patch isn't directly for KPP, it simply removes the functionality that was being abused by the rootkit to get past KPP.

    So technically 32bit users could get the patch but it wouldn't actually do anything for you.
     
    elapsed, Apr 16, 2011
    #10
  11. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    Many thanks elapsed, now it's perfectly clear. Think copy of that article is
    a little ambiguous, since it got me thinking that I could enhance protection by
    manually installing,,,and you know(probably) how paranoid I can be!! :D
     
    Dermot7, Apr 16, 2011
    #11
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...