Tags: Microsoft

Windows Vista now has its first exploit spotted in the public

Microsoft’s much hyped operating system release Vista was made available to business customers last month. And within a month, we have the first Windows Vista exploit available in public.

Security experts have confirmed that a proof of concept code for an unpatched vulnerability in Windows Vista has been released on the internet.

Symantec and eEye Digital Security have confirmed that this bug is a memory corruption vulnerability. And it pops up when the MessageBox function is called.

Mike Reavy, program manager with the Microsoft Security Response Center responded in a statement saying that they are “closely monitoring” the situation.

He said in a blog post: “Initial indications are that in order for the attack to be successful, the attacker must already have authenticated access to the target system. Of course these are preliminary findings.”

Not only Vista, Windows 2000 SP4, Windows XP SP1 and SP2, Windows Server 2003 SP1 are also at risk.