DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: [Security] issues with Vista & Win7 gadgets  (Read 4,186 times)

tomos

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 11,970
    • Gathering Badge
    • Participated in NANY Challenge Once
[Security] issues with Vista & Win7 gadgets
« on: July 19, 2012, 07:44 AM »
Via Windows Secrets -
Kill those Vista and Win7 gadgets now!

Apparently there are large security issues with the sidebar, and gadgets in general.

Quote
Although the vulnerability in gadgets has existed for years, two security researchers are shedding some new light on the threat. At next week’s annual hacker gathering in Las Vegas — Black Hat USA 2012 (more info) — Mickey Shkatov and Toby Kohlenberg will deliver their presentation, “We have you by the gadgets.” As is common for Black Hat presentation pre-announcements, there are as yet few details. But Shkatov and Kohlenberg promise, “We will be talking about the Windows gadget platform and what nastiness can be done with it, how are gadgets made, how are they distributed, and, more importantly, their weaknesses. … As a result, there [are] a number of interesting attack vectors that are interesting to explore and take advantage of. We will be talking about our research into creating malicious gadgets, misappropriating legitimate gadgets, and the sorts of flaws we have found in published gadgets.”

Microsoft have a fix if you want to disable them all:
http://support.microsoft.com/kb/2719662
Tom

IainB

  • @Slartibartfarst
  • Supporting Member
  • Joined in 2008
  • **
  • Posts: 7,544
Re: [Security] issues with Vista & Win7 gadgets
« Reply #1 on: July 27, 2012, 03:35 PM »
Just a belated thanks for posting this.
I have disabled the gadgets on 2 laptops, using the disable FixIt on Microsoft's website.
I have also disabled the gadget service's communication via Windows 7 Firewall Control.

Original address: https://www.donationcoder.com/forum/index.php?topic=31679.0