Windows 7 "Total Meltdown" from MS Meltdown Patch, Major Security Vulnerability
-
Security researchers are warning that Microsoft's Windows 7 Meltdown patch is so bad that it makes security much worse compared to the Meltdown risk it is supposed to fix.
"..the fix that Microsoft provided to Windows 7 computers for the Meltdown flaw, which could allow attackers to read kernel memory at a speed of 120 KB/s, would now allow attackers to read the same kernel memory with a speed of gigabytes per second."
The new bug allows any process to read the complete memory contents of the system, and it also makes it possible to write code to arbitrary memory, too.
-
Whoops
-
-
@stuartjordan pretty much sums it up.
-
I thought this was resolved in the March patches.
-
@danp said in Windows 7 "Total Meltdown" from MS Meltdown Patch, Major Security Vulnerability:
I thought this was resolved in the March patches.
They've since broken it again
-
You see! This is why you shouldn't patch!