Windows 10 News and info | Forum
November 19, 2017, Loading... *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: This is a clean Ad-free Forum and protected by StopForumSpam, Project Honeypot and Botscout | This forum does not use audio ads, popups, or other annoyances.
 
  Website   Home   Windows 8 Website Windows 8 Forum Help Login Register  
Pages: [1]
  Print  
Share this topic on Del.icio.usShare this topic on DiggShare this topic on FacebookShare this topic on GoogleShare this topic on MySpaceShare this topic on RedditShare this topic on StumbleUponShare this topic on TechnoratiShare this topic on TwitterShare this topic on YahooShare this topic on Google buzz
Author Topic: New holy hell as any website or ad can now crash your Windows 7 machine  (Read 410 times)
javajolt
Administrator
Hero Member
*****
Offline Offline

Gender: Male
United States United States

Posts: 27424


I Do Windows


WWW Email
« on: May 26, 2017, 04:41:42 PM »
ReplyReply


A new version of an old bug has just been discovered which can bring any Windows system earlier than Windows 10 to its knees, simply by loading a malformed URL, which of course may be found on a malicious website, in email or loaded by ads on otherwise safe websites.

The issue is due to how the NTFS driver deals with special file names, in this case, the $MFT name, which is one of the special metadata files used by Windows’ NTFS filesystem.

The file is normally hidden from users and most software, but it appears that if it forms part of a directory name (e.g. c:\$MFT\123) Windows will then lock the file and never release it,  making the file system inaccessible, potentially causing a bluescreen,  and forcing a reboot.

The issue can be caused locally, and unfortunately also remotely if $MFT is used as part of a URL.  Some browsers block the malformed URL, but it appears Internet Explorer is all too happy to surrender your machine.

Microsoft has been informed, but a patch has not been released yet.  As usual, the news underlines the imperative to keep your machine updated or else remain vulnerable to old issues which have been newly discovered.

source
Logged



Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2017, Simple Machines

Google visited last this page October 21, 2017, 03:48:46 PM