SP2 fixed two new classes of Windows security flaw

Service Pack 2 (SP2) for Windows XP changed or eliminated more than 400 significant features in the operating system, also eliminating two previously undiscovered classes of security flaws, Microsoft has revealed.

The software company revealed some of the work that went into SP2 at a Canadian security conference last week, with the aim of convincing reluctant organizations that SP2 really is worth installing, according to a report published by security firm SecurityFocus. While considered a significant improvement for Windows security, some companies have been reluctant to roll out the update because it requires thorough testing and breaks compatibility with some Windows XP applications.

Speaking at the CanSecWest conference in Vancouver, Microsoft security strategist Window Snyder [apparently his real name] said the company changed or removed 428 Windows XP features considered security loopholes. Fifty-one of them were in Internet Explorer and 107 were in Windows XP's networking functions.

The company also discovered two "entire classes of vulnerabilities" that have never been reported outside the company, Snyder said in the report. While declining to provide details, Snyder said the vulnerability types had been wiped out.

Prompted by a third-party security review that uncovered a large number of integer overflows, Microsoft launched a crackdown on this type of flaw, delaying the update by six weeks, the report said. It was just "the right thing to do", Snyder said.

Since launching its renewed focus on security - of which SP2 is the centerpiece - Microsoft has gone out of its way to portray itself as having changed its policy of putting product schedules ahead of security, and Snyder's comments reinforced this marketing message.

The company is in no danger of taking its schedule for Longhorn - the next version of Windows - too seriously, according to many industry observers, who wonder if the product will ship this decade. When it does ship, Microsoft at least has promised it will be very secure.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matthew Broersma

Techworld.com
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?