…“The vulnerable driver ships with every version of Windows, up to and including Server 2025,” Adam Barnett, lead software engineer at Rapid7, said. “Maybe your fax modem uses a different chipset, and so you don’t need the Agere driver? Perhaps you’ve simply discovered email? Tough luck. Your PC is still vulnerable, and a local attacker with a minimally privileged account can elevate to administrator.”…
It’s interesting that this supposedly goes back to Windows 3.1 and the original release…
I was curious about the “every version ever shipped.”
This gets really old school.
Personally I blame Dave Plummer.
Ah yes the 0-decade vulnerability…
Boi will I miss the ever-encompasing shield of Microsoft when my Windows 10 stops receiving updates…
makes you wonder if/how/by who its been used all these years
I expect it’s stuff like ATMs, Coinstar machines. Things that may need to phone home regularly but don’t need to sit online constantly.