microsoft
Report a problem

Microsoft: Windows 7 RTM is not affected by zero-day flaw

Sam Symons   on 09 September 2009 - 06:09 · 30 comments & 8411 views

Advertisement (Why?)
Microsoft has issued a formal security advisory in response to the latest flaw discovered within its Windows operating systems, shedding a bit of light on the issue. According to CNET, Microsoft believes that the flaw will not cause any problems for Windows 7 users, and instead only for those on Windows Vista and Windows Server 2008 (not Server 2008 R2, though).

The advisory, found here, stated the following: Microsoft is investigating new public reports of a possible vulnerability in Microsoft Server Message Block (SMB) implementation. We are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time.
We are actively working with partners in our Microsoft Active Protections Program (MAPP) to provide information that they can use to provide broader protections to customers.


However, whilst the report has Windows 7 (both x86 and x64) listed under 'Non-affected Software', be warned: if you're using the release candidate version of the operating system, you're still at risk. If you're running the RTM, you can sleep easy. Microsoft said that once they've fully investigated the flaw, they will include the fix in the monthly patch cycle, or perhaps release it out of that schedule, depending on how necessary it becomes. Keep in mind that Windows XP and 2000 are both safe from the flaw.

Post a comment · Send to friend Comments · There are 30 additional comments
(8 replies) #1 Julius Caro on 09 Sep 2009 - 06:45
So I guess saying that win7 was affected even though the exploit wasn't even working on it, was a bit sensationalist?

#1.1 Sazz181 on 09 Sep 2009 - 08:51
No, Windows 7 is affected if your using a version before RTM.
#1.2 +TCLN Ryster on 09 Sep 2009 - 11:32
Sazz181 said,
No, Windows 7 is affected if your using a version before RTM.

So to be precise, "Windows 7" is not affected, "Windows 7 RC" and "Windows 7 Beta" are.
#1.3 Julius Caro on 09 Sep 2009 - 11:34
Sazz181 said,
No, Windows 7 is affected if your using a version before RTM.


News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right
#1.4 Glendi on 09 Sep 2009 - 12:02
Julius Caro said,
News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right


They're referring to Windows 7 RTM. Seriously, do you use Betas and RC for daily purposes? They are used for tests goddammit.

Windows 7 is not affected, plain and simple.
#1.5 Sazz181 on 09 Sep 2009 - 12:33
News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right


You claimed that the previous headline was sensationalist, and I disagreed, because if you read the article, pre-RTM builds are still at risk. And as some people are still using pre-RTM builds, I'd say my points still valid.
#1.6 +dead.cell on 09 Sep 2009 - 16:37
Well, yeah, I guess for those that are retarded and actually plan to continue using the beta/RC in more than just a test environment.

Seriously though, this is the equivalent of labeling coffee cups with a warning that the coffee... just may be hot!
#1.7 sanriver12 on 09 Sep 2009 - 18:08
Glendi said,
Julius Caro said,
News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right


They're referring to Windows 7 RTM. Seriously, do you use Betas and RC for daily purposes? They are used for tests goddammit.

Windows 7 is not affected, plain and simple.


+100
trolls will be trolls
#1.8 Tikitiki on 09 Sep 2009 - 21:44
Sazz181 said,
News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right


You claimed that the previous headline was sensationalist, and I disagreed, because if you read the article, pre-RTM builds are still at risk. And as some people are still using pre-RTM builds, I'd say my points still valid.


Do you hear yourself? That's like saying Windows XP is still affected by vulnerabilities that were fixed and patched and released on Service Packs years ago. Why not make headline news with that if that's the logic you're using?

Just because a select few are ignorant to keeping their test installations in the appropriate circumstances, does not qualify a misleading title irrespective to common sense.

Last edited by Tikitiki on 09 Sep 2009 - 21:50
(6 replies) #2 zagor on 09 Sep 2009 - 07:00
I think we will see more of these sensational and misleading titles till windows 7 hits the store shelves. It was some claimed show-stopper bug a week ago (which turned out to be a hardware issue), now it is a claimed zero-day vulnerability(which doesn't effect the final code), it will be something else next week...It is blog-o-sphere, everyone feels free to spread any misinformation without any need to check the truth of it or even without questioning the source of the news.
#2.1 Sazz181 on 09 Sep 2009 - 08:53
The article which claimed Windows 7 was affected clearly stated that nothing came up on the one test they did on Windows 7, but it is still possible something could come up later. In this case, it did, just on pre-RTM versions of Windows 7.
#2.2 Glendi on 09 Sep 2009 - 10:55
Sazz181 said,
The article which claimed Windows 7 was affected clearly stated that nothing came up on the one test they did on Windows 7, but it is still possible something could come up later. In this case, it did, just on pre-RTM versions of Windows 7.


Sure, what about the title?
#2.3 +shinji257 on 09 Sep 2009 - 16:27
Glendi said,
Sure, what about the title?


Those that run pre-RTM versions of Windows 7 put alot on the table. Microsoft may release a patch for pre-RTM versions but isn't likely. None the less they will only support and publicly document about the RTM release. To say that Windows 7 isn't affected would be correct. Bugs and security flaws in pre-RTM versions may exist that do not exist in the RTM version would not be documented in any security advisory or knowledge base article on the assumption that no one is using it for production use.

Betas and Release Candidates are not intended for production use but rather trial, testing, and development use.
#2.4 zagor on 09 Sep 2009 - 17:39
Sazz181 said,
The article which claimed Windows 7 was affected clearly stated that nothing came up on the one test they did on Windows 7, but it is still possible something could come up later. In this case, it did, just on pre-RTM versions of Windows 7.


you continue to chew on that garbage...
Is MS selling windows 7 RC? What do you make of the title when you read it? Do you think it is RC that is effected and not the retail copy? Can you make that out from that title?
#2.5 Sazz181 on 09 Sep 2009 - 18:01
It says Windows 7 RTM. It says versions before that are still at risk. Dunno where the sensationalist headline you're seeing is.
#2.6 zagor on 09 Sep 2009 - 18:26
Sazz181 said,
It says Windows 7 RTM. It says versions before that are still at risk. Dunno where the sensationalist headline you're seeing is.


Dude, you are late to the party. In the original title it was just "windows 7" not "windows 7 RC". They have updated the title after probably realizing how wrong a title it was.
(1 reply) #3 turk4n on 09 Sep 2009 - 08:31
"We are sorry, the page you requested cannot be found.
See below for search results close to your request, or try a new search."

Anyone getting this?
#3.1 Nick Brunt on 09 Sep 2009 - 10:50
Nope, works for me.
(4 replies) #4 veternan on 09 Sep 2009 - 10:22
Keep in mind that Windows XP and 2000 are both safe from the flaw.


Viva La XP!!
#4.1 Ci7 on 09 Sep 2009 - 10:30
viva la 7 !
#4.2 Frylock86 on 09 Sep 2009 - 10:51
veternan said,

Viva La XP!!




Viva La Win7!!
#4.3 ThaCrip on 09 Sep 2009 - 11:22
you can keep XP ... i got a free legit Windows7 Home Premium key (it's legit) and i would never even dream of going back to XP. heck, even once i got Vista i would rather not go back to XP. Vista is not nearly as bad as people say it is atleast not since Vista SP1, which is when i first started using Vista.

Win7 is basically a amped up Vista as one of the first thing you noticed when going from Vista to Win7 is that those popup windows that you get on the taskbar when moving the mouse pointer over it are interactive.

so while 'so far' i think Windos7 is better than Vista i would not say it's a huge boost over Vista personally so far but i will need to keep using Win7 over the next few months to start noticing the details on it.

but i been running the RTM version for a little over 2 weeks now and it's pretty good.

but any one still using XP... i would say Windows7 is definitely time to upgrade since XP does feel a little old nowadays as you can tell Vista/Win7 are more modern.

so while people would argue, "why change from XP to anything else if XP 'just works'" ... and you would be right but i personally like the feel of Vista/Win7 and the little things makes me never want to go back to XP again for my main OS on my main PC.

but i will admit had i actually had to pay for Vista or Win7 (don't worry both of my Vista/Win7 keys are legit) and already had XP i most likely would not bother upgrading because the 100-200 dollars for the upgrade just aint worth it although if you could get Windows7 for less than 100 i would consider it for sure if your PC is fairly modern.
#4.4 vvtunes on 09 Sep 2009 - 14:12
I regret the day I installed Win 7 RTM, because now I'm never going back!
#5 powerade01 on 09 Sep 2009 - 11:06
Yet noone fixes the title on the other article.

I remember articles on Neowin "Flaw affects Win XP; Vista not affected" but now...
(2 replies) #6 on 01 Jan 1970 - 00:00
#6.1 So-Unreal on 09 Sep 2009 - 12:47
How do you know?
#6.2 +shinji257 on 09 Sep 2009 - 16:29
franzon said,

BREAKING NEWS:
if you disable the paging file, Windows 7 will become vulnerable to this attack!

try yourself


How would disabling the paging file make yourself vulnerable to attack. That's pure BS and just spreading rumors at this point.
#7 Kelxin on 09 Sep 2009 - 14:45
I wouldn't believe anyone that said

Vista is better than Win7



Ignore franzon....
(1 reply) #8 Izlude on 09 Sep 2009 - 21:14
in other news, windows can be hacked if you let someone use your computer and mess around with it as is the same with every other OS out there. the end.
#8.1 SleeStak on 09 Sep 2009 - 23:13
Izlude said,
in other news, windows can be hacked if you let someone use your computer and mess around with it as is the same with every other OS out there. the end.


watchout someone might use that as a new sensational breaking news headline
#9 t0l4 on 10 Sep 2009 - 20:34
i was looking on infoworld.com a days ago, and can you imagine they actually linked to an article which they claimed stated that the flaw was effected on the RTM of Windows 7 [but actually didn't]? the Randolph guys is just so ridiculous and full of lies; i assumed after the "diskpart bug risks derailing Windows7 RTM" article he'd take some "chill-pill", but i guess not, he just likes the undeserved attention.

it's good to know MS is staying on top of this though.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)