bk99.de entertain the web since 1997

bk99.de
g · SecurityCurated

Google publishes Windows security hole

Summary

In early 2015 Google published a hole in Windows 8.1 after Microsoft had not closed it within 90 days. Via NtApphelpCacheControl, a user with restricted rights could gain administrator rights. Google’s experts had found the vulnerability at the end of September 2014 and informed Microsoft.

Ideas

  • A fixed deadline forces vendors to close holes in time.
  • When it expires, the hole is published regardless of the patch status.
  • The hole allowed local privilege escalation.

Insights

  • Disclosure deadlines shift power from vendors to researchers and users.
  • Rigid deadlines can also endanger users if the patch comes just afterwards.

Facts

  • The hole concerned NtApphelpCacheControl in Windows 8.1.
  • It was discovered at the end of September 2014.
  • Google founded Project Zero in July 2014.
  • At first Microsoft only responded with a comment, pointing out that a user account was required.

References

Critique

  • The report does not discuss whether the rigid 90-day deadline endangered users in this case.

Remarks

  • Google’s Project Zero still sticks to the 90-day deadline, supplemented by a short grace period.

Recommendations

  • Plan patch processes so that updates are installed within a few days of publication.
  • Follow publications by Project Zero and similar teams for the products you use.

Read the original article

Search the Web Archive

g · 2020

The tricks with the Google security hole

In early 2020 Trend Micro found malicious apps in the Google Play Store that exploited an Android hole previously used by customers of the spyware maker NSO. Google itself had discovered the hole around a year and a half earlier. The apps Camero and Filecrypt Manager served as droppers and secretly installed the spy app Callcam.

g · 2026

Broadcom hole lets attackers knock out entire Wi-Fi networks

In January 2026 researchers from Black Duck found a hole in Broadcom Wi-Fi chipsets through which an attacker within radio range can knock out a 5 GHz network with a single packet, without logging in and regardless of WPA2 or WPA3. All clients lose their connection until the router is restarted, and the attack can be repeated immediately. Testing was done on an Asus RT-BE86U; Broadcom had already patched, but how far manufacturers had passed this on remained unclear.

g · 2025

17,000 Linux servers vulnerable to critical rsync hole

In January 2025 six holes in rsync became known, including the critical CVE-2024-12084, which in combination allows servers with only anonymous read access to be taken over. According to Shadowserver, 17,475 freely reachable rsync servers worldwide were vulnerable on 16 January, with Germany in fifth place with 956. All versions up to 3.3.0 were affected; the fixes came in 3.4.0 and 3.4.1.