Signed driver on Vista in not secure
July 31st, 2007
Symantec pointed out a serious problem on Windows Vista. Although officially no unsigned driver can get into Vista, there’s actually a tool created to evade the built-in security. The problem is that there are malicious drivers that can be used by rootkits, therefore they shouldn’t be allowed to sneak in.
Even if Microsoft finds a way to block similar tools, there is another threat. As only signed drivers should be allowed, one can register a company and get a signing certificate legally. While malicious drivers can be signed too, Vista’s security is not as great as advertised.
You can read the full article here.
Recently commented malware