How long has researcher Hugh exposed the Vista vulnerability?

According to the latest report, an Austrian security vendor Phion has found another vulnerability in Vista, which may allow unauthorized code to run on a PC.

This problem is rooted in the Device IO Control responsible for internal Device communication. The security vendor researcher found two ways to cause buffer overflow, which can damage the kernel storage of the operating system.

Generally, hackers can exploit the vulnerabilities to attack the system only after obtaining certain access permissions. However, this vulnerability allows hackers to trigger buffer overflow without any administrative permissions.

Thomas Unterleitner, Phion's endpoint security software director, said the vulnerability may allow hackers to install a malware rootkit. Currently, it is difficult for computers to detect and delete it.

Phion told Microsoft about the problem in October 22. Microsoft said they would release a patch in the next service package of Vista to solve the problem. Last month, Microsoft just released a test version of Vista SP2, and the official version will be released in May.

Unterleitner said many people are interested in this vulnerability: "We have received requests from many places around the world, hoping to provide details about this vulnerability ."

So far, Microsoft has not commented on this.