SP2 fixed two new classes of Windows security flaw

Service Pack 2 (SP2) for Windows XP changed or eliminated more than 400 significant features in the operating system, also eliminating two previously undiscovered classes of security flaws, Microsoft has revealed.

The software company revealed some of the work that went into SP2 at a Canadian security conference last week, with the aim of convincing reluctant organizations that SP2 really is worth installing, according to a report published by security firm SecurityFocus. While considered a significant improvement for Windows security, some companies have been reluctant to roll out the update because it requires thorough testing and breaks compatibility with some Windows XP applications.

Speaking at the CanSecWest conference in Vancouver, Microsoft security strategist Window Snyder [apparently his real name] said the company changed or removed 428 Windows XP features considered security loopholes. Fifty-one of them were in Internet Explorer and 107 were in Windows XP's networking functions.

The company also discovered two "entire classes of vulnerabilities" that have never been reported outside the company, Snyder said in the report. While declining to provide details, Snyder said the vulnerability types had been wiped out.

Prompted by a third-party security review that uncovered a large number of integer overflows, Microsoft launched a crackdown on this type of flaw, delaying the update by six weeks, the report said. It was just "the right thing to do", Snyder said.

Since launching its renewed focus on security - of which SP2 is the centerpiece - Microsoft has gone out of its way to portray itself as having changed its policy of putting product schedules ahead of security, and Snyder's comments reinforced this marketing message.

The company is in no danger of taking its schedule for Longhorn - the next version of Windows - too seriously, according to many industry observers, who wonder if the product will ship this decade. When it does ship, Microsoft at least has promised it will be very secure.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matthew Broersma

Techworld.com
Show Comments

Cool Tech

Breitling Superocean Heritage Chronographe 44

Learn more >

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?