Microsoft still certifying leaky drivers
InfoWorld | at | by Mike
Months after promising to tighten up its procedures for certifying third-party software drivers, Microsoft is still giving the green light to network interface card (NIC) drivers that leak sensitive user information from machines running Windows Server 2003, according to a prominent security company. The allegations were made in an alert posted Monday by Next Generation Security Software (NGSSoftware) of Sutton, England.
At least two NIC drivers that shipped with Windows Server 2003 contain a security hole that leaks information stored on a system in Ethernet "frames" or streams of data sent over a network, according to the alert.