Microsoft: Widget-urile sunt vulnerabile la malware

De curând am tot încercat să fac widget-ul de vreme să funcționeze și să îmi spună câte grade sunt afară. Nu a vrut de nici un fel. Un simplu search pentru “Cannot connect to service” m-a ajutat să găsesc răspunsul.

Microsoft renunță la widget-urile din Windows Sidebar

Datorită vulnerabilitățiilor găsite, îl ultimele update-uri Microsoft, a oprit posibilitatea utilizării widget-urilor, însă pentru doritori, ele încă se mai pot activa, doar manual.

Microsoft Security Advisory: Vulnerabilities in Gadgets could allow remote code execution.

Microsoft is announcing the availability of an automated Microsoft Fix it solution that disables Windows Sidebar and Gadgets on supported editions of Windows Vista and Windows 7. Disabling Windows Sidebar and Gadgets can help protect customers from potential attacks that leverage Gadgets to execute arbitrary code.

Customers should consider the following ways that an attacker could leverage Gadgets to execute arbitrary code:

Microsoft is aware that some legitimate Gadgets running in Windows Sidebar could contain vulnerabilities. An attacker who successfully exploited a Gadget vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take complete control of the affected system.
An attacker could create a malicious Gadget and then trick a user into installing the malicious Gadget. Once installed, the malicious Gadget could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take complete control of the affected system.
In addition, Gadgets can access your computer’s files, show you objectionable content, or change their behavior at any time. Gadgets could also potentially harm your computer.

Applying the automated Microsoft Fix it solution described in Microsoft Knowledge Base Article 2719662 disables the Windows Sidebar experience and all Gadget functionality.

Recommendation. Customers who are concerned about vulnerable or malicious Gadgets should apply the automated Microsoft Fix it solution as soon as possible. For more information, see the Suggested Actions section of this advisory.

Dacă încă sunteți pe versiunea piratată și nu vreți să fiți “atacați” puteți să dezactivați / activați Windows Sidebar and Gadgets.