First Windows 7 Exploit Slips Through SDL Process

November 14th, 2009

Windows 7 escaped the monthly patching process earlier this week, but it didn’t escape the notice of hackers. What some security researchers are calling the first zero-day exploit in Windows 7 has been identified and Microsoft is investigating the issue.

Security researcher Laurent Gaffié called Microsoft on the carpet for its Secure Development Lifecycle (SDL) process on Wednesday. Gaffié also published proof-of-concept exploit code that he says will crash both Windows 7 and Windows Server 2008 R2.

“This bug is a real proof that SDL #FAIL,” Gaffié wrote in his blog post. “The bug is so noob, it should have been spotted two years ago by the SDL if the SDL had ever existed.”

Read the rest of my story on TopTechNews.

Entry Filed under: Hot off the Press