Microsoft Kills Windows Gadgets Via Security Update

[wraggster]

Microsoft has taken the unusual step of killing the Windows Gadgets feature completely (http://arstechnica.com/security/2012/07/microsoft-fix-kills-windows-gadgets/) via a security update. According to anadvisory issued Tuesday (https://technet.microsoft.com/en-us/security/advisory/2719662), an attacker could take over a user's system if they are logged in as admin and they install a vulnerable gadget. Microsoft has pulled the plug on its official Gadgets Gallery (http://windows.microsoft.com/en-us/windows/downloads/personalize/gadgets) and is offering a Fix-it that completely disables the Windows Sidebar and Gadgets. Researchers Mickey Shkatov and Toby Kohlenberg are scheduled to give a presentation on the vulnerability at the upcoming Black Hat conference called We Have You By the Gadgets (https://www.blackhat.com/html/bh-us-12/bh-us-12-briefings.html#Shkatov).

http://it.slashdot.org/story/12/07/12/166200/microsoft-kills-windows-gadgets-via-security-update