Roy Schestowitz wrote:
Intel: Driver flaws no major threat--yet
,----[ Quote ]
| Flaws in driver software may be worrisome and a potentially serious
| threat, but security experts at Intel see no need for alarm. At least,
| not yet.
|
| In a recent experiment, researchers at the Santa Clara, Calif.-based
| chipmaker searched for publicly known vulnerabilities in drivers for
| Microsoft's Windows operating system. They also hunted for malicious
| code that took advantage of those security holes. In particular, they
| wanted to find problems in kernel-level drivers and exploits that would
| give an attacker full rein over a vulnerable system.
`----
http://news.zdnet.com/2100-1009_22-6083511.html
The dishonest thread title has been corrected.
<quote>
In a recent experiment, researchers at the Santa Clara, Calif.-based
chipmaker searched for publicly known vulnerabilities in drivers for
Microsoft's Windows operating system. They also hunted for malicious
code that took advantage of those security holes. In particular, they
wanted to find problems in kernel-level drivers and exploits that would
give an attacker full rein over a vulnerable system.
The search came up almost empty.
"It was difficult to find something that was useful for us," David
Schulhoff, a senior information security specialist at Intel, said
Monday in a presentation at the Computer Security Institute's annual
NetSec event. "There really are not that many Windows kernel-mode
driver vulnerabilities out there."
Other security experts agree with Intel's assessment.
</quote>
