Windows7's first zero-day vulnerability was discovered by hackers

This month's security update released by Microsoft did not involve the latest Windows 7 operating system, but it does not mean that Windows 7 can be safe. Recently, foreign security researchers said they have Discover the first zero-day security vulnerability in the Windows 7 operating system. After learning the news, Microsoft is currently investigating the issue.

Security personnel pointed out that Microsoft's Security Development Lifecycle (SDL) vulnerability and published a proof of concept that exploited the vulnerability code, which could crash Windows 7 and Windows Server 2008 R2. Security personnel said that this vulnerability proves the failure of Microsoft SDL, which will cause an infinite loop of SMB protocol and can cause this failure remotely through IE browser.

Although Microsoft has seen security vulnerabilities in the SMB protocol in the past, security researchers point out that using the default firewall to set up such a security vulnerability is difficult to exploit. But one way to circumvent this vulnerability is to block ports 135, 139, and 445 on the router or firewall to prevent external SMB traffic from entering the system.

The industry is not surprised by the researchers pointing out that Windows 7 system security vulnerabilities, I think the Windows 7 code was finalized this summer, and the attacker can have enough time to find the vulnerabilities. For more news, please visit the Windows 7 channel.