Microsoft: Windows 7 RTM is not affected by zero-day flaw

Microsoft has issued a formal security advisory in response to the latest flaw discovered within its Windows operating systems, shedding a bit of light on the issue. According to CNET, Microsoft believes that the flaw will not cause any problems for Windows 7 users, and instead only for those on Windows Vista and Windows Server 2008 (not Server 2008 R2, though).

The advisory, found here, stated the following: Microsoft is investigating new public reports of a possible vulnerability in Microsoft Server Message Block (SMB) implementation. We are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time.
We are actively working with partners in our Microsoft Active Protections Program (MAPP) to provide information that they can use to provide broader protections to customers.

However, whilst the report has Windows 7 (both x86 and x64) listed under 'Non-affected Software', be warned: if you're using the release candidate version of the operating system, you're still at risk. If you're running the RTM, you can sleep easy. Microsoft said that once they've fully investigated the flaw, they will include the fix in the monthly patch cycle, or perhaps release it out of that schedule, depending on how necessary it becomes. Keep in mind that Windows XP and 2000 are both safe from the flaw.

Report a problem with article
Previous Story

DSGi employees caught insulting customers on Facebook

Next Story

Apple drops iPod prices hours before media event

27 Comments

Commenting is disabled on this article.

i was looking on infoworld.com a days ago, and can you imagine they actually linked to an article which they claimed stated that the flaw was effected on the RTM of Windows 7 [but actually didn't]? the Randolph guys is just so ridiculous and full of lies; i assumed after the "diskpart bug risks derailing Windows7 RTM" article he'd take some "chill-pill", but i guess not, he just likes the undeserved attention.

it's good to know MS is staying on top of this though.

in other news, windows can be hacked if you let someone use your computer and mess around with it as is the same with every other OS out there. the end.

Izlude said,
in other news, windows can be hacked if you let someone use your computer and mess around with it as is the same with every other OS out there. the end.


watchout someone might use that as a new sensational breaking news headline

you can keep XP ... i got a free legit Windows7 Home Premium key (it's legit) and i would never even dream of going back to XP. heck, even once i got Vista i would rather not go back to XP. Vista is not nearly as bad as people say it is atleast not since Vista SP1, which is when i first started using Vista.

Win7 is basically a amped up Vista as one of the first thing you noticed when going from Vista to Win7 is that those popup windows that you get on the taskbar when moving the mouse pointer over it are interactive.

so while 'so far' i think Windos7 is better than Vista i would not say it's a huge boost over Vista personally so far but i will need to keep using Win7 over the next few months to start noticing the details on it.

but i been running the RTM version for a little over 2 weeks now and it's pretty good.

but any one still using XP... i would say Windows7 is definitely time to upgrade since XP does feel a little old nowadays as you can tell Vista/Win7 are more modern.

so while people would argue, "why change from XP to anything else if XP 'just works'" ... and you would be right but i personally like the feel of Vista/Win7 and the little things makes me never want to go back to XP again for my main OS on my main PC.

but i will admit had i actually had to pay for Vista or Win7 (don't worry both of my Vista/Win7 keys are legit) and already had XP i most likely would not bother upgrading because the 100-200 dollars for the upgrade just aint worth it although if you could get Windows7 for less than 100 i would consider it for sure if your PC is fairly modern.

"We are sorry, the page you requested cannot be found.
See below for search results close to your request, or try a new search."

Anyone getting this?

I think we will see more of these sensational and misleading titles till windows 7 hits the store shelves. It was some claimed show-stopper bug a week ago (which turned out to be a hardware issue), now it is a claimed zero-day vulnerability(which doesn't effect the final code), it will be something else next week...It is blog-o-sphere, everyone feels free to spread any misinformation without any need to check the truth of it or even without questioning the source of the news.

The article which claimed Windows 7 was affected clearly stated that nothing came up on the one test they did on Windows 7, but it is still possible something could come up later. In this case, it did, just on pre-RTM versions of Windows 7.

Sazz181 said,
The article which claimed Windows 7 was affected clearly stated that nothing came up on the one test they did on Windows 7, but it is still possible something could come up later. In this case, it did, just on pre-RTM versions of Windows 7.

Sure, what about the title?

Glendi said,
Sure, what about the title?

Those that run pre-RTM versions of Windows 7 put alot on the table. Microsoft may release a patch for pre-RTM versions but isn't likely. None the less they will only support and publicly document about the RTM release. To say that Windows 7 isn't affected would be correct. Bugs and security flaws in pre-RTM versions may exist that do not exist in the RTM version would not be documented in any security advisory or knowledge base article on the assumption that no one is using it for production use.

Betas and Release Candidates are not intended for production use but rather trial, testing, and development use.

Sazz181 said,
The article which claimed Windows 7 was affected clearly stated that nothing came up on the one test they did on Windows 7, but it is still possible something could come up later. In this case, it did, just on pre-RTM versions of Windows 7.

you continue to chew on that garbage...
Is MS selling windows 7 RC? What do you make of the title when you read it? Do you think it is RC that is effected and not the retail copy? Can you make that out from that title?

It says Windows 7 RTM. It says versions before that are still at risk. Dunno where the sensationalist headline you're seeing is.

Sazz181 said,
It says Windows 7 RTM. It says versions before that are still at risk. Dunno where the sensationalist headline you're seeing is.

Dude, you are late to the party. In the original title it was just "windows 7" not "windows 7 RC". They have updated the title after probably realizing how wrong a title it was.

Sazz181 said,
No, Windows 7 is affected if your using a version before RTM.

So to be precise, "Windows 7" is not affected, "Windows 7 RC" and "Windows 7 Beta" are.

Sazz181 said,
No, Windows 7 is affected if your using a version before RTM.

News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right

Julius Caro said,
News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right

They're referring to Windows 7 RTM. Seriously, do you use Betas and RC for daily purposes? They are used for tests goddammit.

Windows 7 is not affected, plain and simple.

News headline: "Microsoft: Windows 7 is not affected by zero-day flaw"


Yeah right

You claimed that the previous headline was sensationalist, and I disagreed, because if you read the article, pre-RTM builds are still at risk. And as some people are still using pre-RTM builds, I'd say my points still valid.

Well, yeah, I guess for those that are retarded and actually plan to continue using the beta/RC in more than just a test environment.

Seriously though, this is the equivalent of labeling coffee cups with a warning that the coffee... just may be hot!

Glendi said,


They're referring to Windows 7 RTM. Seriously, do you use Betas and RC for daily purposes? They are used for tests goddammit.

Windows 7 is not affected, plain and simple.


+100
trolls will be trolls

Sazz181 said,

You claimed that the previous headline was sensationalist, and I disagreed, because if you read the article, pre-RTM builds are still at risk. And as some people are still using pre-RTM builds, I'd say my points still valid.

Do you hear yourself? That's like saying Windows XP is still affected by vulnerabilities that were fixed and patched and released on Service Packs years ago. Why not make headline news with that if that's the logic you're using?

Just because a select few are ignorant to keeping their test installations in the appropriate circumstances, does not qualify a misleading title irrespective to common sense.