Windows 7's first zero-day vulnerability was discovered by hackers

The security update released by Microsoft this month does not involve the latest Windows 7 operating system, but does not mean that Windows 7 will be safe and sound, foreign Security researchers recently said they have discovered the first zero-day security vulnerability in the Windows 7 operating system.

After hearing the news, Microsoft is investigating the problem.

Security personnel pointed out that Microsoft's security development lifecycle SDL has vulnerabilities and issued a proof of concept of using the Security Vulnerability code, this vulnerability can crash Windows 7 and Windows Server 2008 R2. Security personnel said that this security vulnerability proves Microsoft SDL's failure. It will cause an infinite loop of SMB protocol and remote failure can be caused through IE browser.

Although Microsoft has encountered SMB security vulnerabilities in the past, security researchers pointed out that using the default firewall to set such security vulnerabilities is very difficult to exploit. However, one way to bypass this security vulnerability is to block ports 135, 139, and 445 on the vro or firewall to prevent external SMB communication from entering the system.

Industry insiders told researchers that it is not surprising that the Windows 7 system has encountered a security vulnerability. They believe that the Windows 7 code was finalized as early as this summer. Attackers can have enough time to find the vulnerability.