Microsoft Urges Users to Shut Down Windows Gadgets or Risk Attack

Rather than fix vulnerabilities with Gadgets and the Sidebar in Windows Vista and Windows 7, Microsoft is advising users to disable the features altogether.

Gadgets and Sidebar allow users to add visual information and small programs to the Windows desktop, including clock faces, music players and RSS feed readers.

Now, Microsoft has issued a Fix It solution to disable Gadgets and the Sidebar. These features, if left enabled, may allow the execution of arbitrary code, and could allow attackers to take complete control of a person’s system, Microsoft warns in a Knowledge Base article.

Read more at:
Microsoft Urges Users to Shut Down Windows Gadgets or Risk Attack | PCWorld

   Note

If you wish to disable Gadgets, then see:

Gadgets - Enable or Disable - Windows 7 Forums

 

[VFN]

You're vulnerable even if the sidebar/gadgets are not opened and running?

 

[susana1027]

Microsoft Security Advisory 2719662 says in part, "Disabling the Windows Sidebar and Gadgets can help protect customers from vulnerabilities that involve the execution of arbitrary code by the Windows Sidebar when running insecure Gadgets. In addition, Gadgets installed from untrusted sources can harm your computer and can access your computer's files, show you objectionable content, or change their behavior at any time." I understand that to say that gadgets installed from third party sources could cause a problem.

But I am only using the gadgets that came from Microsoft - the ones that came with Vista Home Premium. I'm currently using the clock, calendar, and post-it notes. I haven't installed any other gadgets. Am I correct in understanding that the gadgets from Microsoft are safe? :huh: