Microsoft Denies Virtual PC Vulnerability
Core Securities, a company which develops vulnerability testing software, has discovered a major flaw in Microsoft's virtualisation software which might allow hackers to exploit virtual Windows systems.
Interestingly, Microsoft, which was informed about the flaw 6 months ago, refuses to acknowledge the security hole as a critical one.
According to a report released by the company, Microsoft's Virtual PC, Virtual PC 2007 and Virtual 2005 are affected by a major security bug which might allow hackers to penetrate the security measures set-up by Microsoft including DEP (data execution prevention) and ASRL (address space layout randomization).
