Websense warns of leaky Windows
 

Websense has found that Windows is leaking information which could be used by a hacker to craft specific attacks and compromise networks.

According to the outfit, Windows Error Reporting, known as Dr Watson, sends out its crash logs which can be tracked by eavesdroppers to map out vulnerable endpoints and gain a foothold within the network for more advanced penetration.

WER is used by 80 percent of all network-connected PCs use it and Dr. Watson reports information that hackers use to find and exploit weak systems such as OS, service pack and update versions

Crashes are especially useful for attackers since they may pinpoint a new exploitable code flaw for a zero-day attack

http://news.techeye.net/software/web...-leaky-windows