Microsoft Urges Users to Shut Down Windows Gadgets or Risk Attack

Rather than fix vulnerabilities with Gadgets and the Sidebar in Windows Vista and Windows 7, Microsoft is advising users to disable the features altogether.

Gadgets and Sidebar allow users to add visual information and small programs to the Windows desktop, including clock faces, music players and RSS feed readers.

Now, Microsoft has issued a Fix It solution to disable Gadgets and the Sidebar. These features, if left enabled, may allow the execution of arbitrary code, and could allow attackers to take complete control of a person’s system, Microsoft warns in a Knowledge Base article.
Click to expand...

Read more at:
Microsoft Urges Users to Shut Down Windows Gadgets or Risk Attack | PCWorld


Note   Note
If you wish to disable Gadgets, then see:

Gadgets - Enable or Disable - Windows 7 Forums

 
Click to expand...
You're vulnerable even if the sidebar/gadgets are not opened and running?
 

My Computer

System One

  • Operating System
    Vista Home Premium x64
    Manufacturer/Model
    Dell Inspiron 546
    CPU
    Sempron LE-1300
    Memory
    2GB DDR SDRAM 800MHZ-2X1GB DIM M
    Graphics Card(s)
    Integrated ATI Radeon HD3200
    Sound Card
    VIA High Definition Audio
    Monitor(s) Displays
    Samsung 32" HDTV
    Screen Resolution
    1366 x 768
    Hard Drives
    320GB NCQ Serial ATA (7200 RPM) w/ 16MB DataBurst Cache
Microsoft Security Advisory 2719662 says in part, "Disabling the Windows Sidebar and Gadgets can help protect customers from vulnerabilities that involve the execution of arbitrary code by the Windows Sidebar when running insecure Gadgets. In addition, Gadgets installed from untrusted sources can harm your computer and can access your computer's files, show you objectionable content, or change their behavior at any time." I understand that to say that gadgets installed from third party sources could cause a problem.

But I am only using the gadgets that came from Microsoft - the ones that came with Vista Home Premium. I'm currently using the clock, calendar, and post-it notes. I haven't installed any other gadgets. Am I correct in understanding that the gadgets from Microsoft are safe? :huh:
 

My Computer

System One

You must log in or register to reply here.
Back
Top