Microsoft Fixing Windows 8 Flaws, But Leaving Them In Windows 7

[wraggster]

Microsoft has left Windows 7 exposed by only applying security upgrades to its newest operating systems (http://www.theregister.co.uk/2014/06/06/patch_piker_redmond_means_win_8_fixes_skip_7_resea rchers_say/). Researchers found the gaps after they scanned 900 Windows libraries using a custom diffing tool (https://github.com/pinkflawd/DiffRay) and uncovered a variety of security functions that were updated in Windows 8 but not in 7. They said the shortcoming could lead to the discovery of zero day vulnerabilities. The missing safe functions were part of Microsoft's dedicated libraries intsafe.h and strsafe.h that help developers combat various attacks.

http://tech-beta.slashdot.org/story/14/06/07/1621213/microsoft-fixing-windows-8-flaws-but-leaving-them-in-windows-7