Technobezz

Microsoft Does Not Plan To Fix a Decade-Old Bug

Windows kernel has an old bug that can allow malicious actions on your computer and the Microsoft refuses to consider it a threat despite the warnings of various researchers.

How does this bug work?

Back with Windows 2000 a low-level interface known as PsSetLoadImageNotifyRoutine was introduced. It was supposed to inform drives when a module is loaded into a process. This allowed drivers that were powering security products to track modules.

However, it was discovered that it does not always provide correct results, allowing hackers to use the name of a loaded module. This way, security products wouldn’t scan the file and malicious actions could affect your computer.

This bug appears to be a programming error and it should be quickly fixed since it can be used to easily trick third-party security products such as antimalware.

Security researchers discovered this bug

Many researchers noticed this problem, especially because it affects all versions of Windows. According to Omei Misgav, a security researcher at enSilo, “Any security vendor that relies on the information supplied by this notification routine may be fooled into looking at the wrong module at load time ” He also added that any attacker is able to reproduce this bug easily. Once these operations are performed the notification routine will receive an incorrect path,” he said.

Omei Misgav wrote a blog post about this bug where he also added that enSilk did not test a specific security product.

Microsoft does not consider it a threat

A Microsoft spokesperson declared that “Our engineers reviewed the information and determined this does not pose a security threat and we do not plan to address it with a security update.” It can be hard to understand why a tech giant like Microsoft would allow a 17 years old bug that could harm the users’ safety. “

More on this topic

Leave a Reply

The New Samsung Galaxy Watch Looks like a Dream
The Samsung Galaxy S10 is Rumored to have a Huge Camera Update
Samsung Galaxy S10 Won’t be the Company’s First 5G Device
Apparently, the Galaxy Note 9 has the best Display Available
Android Apple Gaming How To Internet iPhone Personal Computers Review Site review The Top Best
How to Fix Samsung Galaxy S9 Wi-Fi Issues
How to Fix Samsung Galaxy S9 Wi-Fi Issues

The list of features and specs that the Galaxy S9 has...

Samsung Galaxy S9 Plus problems
Common Samsung Galaxy S9 Plus problems and how to fix them

The Samsung Galaxy S9 Plus is one of the high-end smartphones...

Samsung Galaxy S9 problems
Common Samsung Galaxy S9 Problems and How to Fix Them

Samsung Galaxy S9 is one of the most popular smartphones in...