Windows 10 News and info | Forum
August 15, 2018, Loading... *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: This is a clean Ad-free Forum and protected by StopForumSpam, Project Honeypot, Botscout and AbuseIPDB | This forum does not use audio ads, popups, or other annoyances.
  Website   Home   Windows 8 Website GDPR Help Login Register  
By continuing to use the site or Forum, you agree to the use of cookies, find out more by reading our GDPR policy.
Pages: [1]
Share this topic on Del.icio.usShare this topic on DiggShare this topic on FacebookShare this topic on GoogleShare this topic on MySpaceShare this topic on RedditShare this topic on StumbleUponShare this topic on TechnoratiShare this topic on TwitterShare this topic on YahooShare this topic on Google buzz
Author Topic: New holy hell as any website or ad can now crash your Windows 7 machine  (Read 663 times)
Hero Member
Offline Offline

Gender: Male
United States United States

Posts: 28763

I Do Windows

WWW Email
« on: May 26, 2017, 04:41:42 PM »

A new version of an old bug has just been discovered which can bring any Windows system earlier than Windows 10 to its knees, simply by loading a malformed URL, which of course may be found on a malicious website, in email or loaded by ads on otherwise safe websites.

The issue is due to how the NTFS driver deals with special file names, in this case, the $MFT name, which is one of the special metadata files used by Windows’ NTFS filesystem.

The file is normally hidden from users and most software, but it appears that if it forms part of a directory name (e.g. c:\$MFT\123) Windows will then lock the file and never release it,  making the file system inaccessible, potentially causing a bluescreen,  and forcing a reboot.

The issue can be caused locally, and unfortunately also remotely if $MFT is used as part of a URL.  Some browsers block the malformed URL, but it appears Internet Explorer is all too happy to surrender your machine.

Microsoft has been informed, but a patch has not been released yet.  As usual, the news underlines the imperative to keep your machine updated or else remain vulnerable to old issues which have been newly discovered.


Pages: [1]
Jump to:  

Powered by SMF 1.1.21 | SMF © 2017, Simple Machines

Google visited last this page August 10, 2018, 08:24:20 PM