-
Anonymous users2024-02-05The default permissions of the crash dump file are not set properly, which may lead to the leakage of sensitive information.
Affected system: All current Windows versions.
Details: Watson) is a built-in program error debugger for Windows. Default.
state, when there is a program error, dr.Watson will start automatically unless there is a VC or other one installed on the system.
The software for the debugging function has changed the defaults. Registry key:
hkey_local_machine\software\microsoft\windows nt\currentversion\aedebug]
The value of the debugger item under specifies the debugger and the commands used; The auto item determines whether to automatically diagnose the error and records the appropriate diagnostic information.
hkey_local_machine\software\microsoft\windows nt\currentversion\aedebug]
In Windows 2000, the crash dump file is stored in a directory by default.
documents and settings all users documents drwatson". The permission is everyone
Full control. In Windows NT is stored in "WinNT" and the Everyone group has at least read access.
Because the content stored in is a partial memory mirror of the current user, it can lead to a variety of sensitive information.
Leaks, such as accounts, passwords, emails, pages viewed, files in progress, etc., depending on the crash.
application and those actions that the user did before that.
Because Windows programs are so prone to crashing, it cannot be ruled out that malicious users can exploit this weakness to obtain unauthorized information.
Possibly. For example, exploiting the above malformed annotation vulnerabilities can make browsing contain malicious **.
and see mail program crashes that contain malicious**.
Solution: Take any of the following measures to solve this problem: 1. Type drwtsn32 without parameters, and change the crash dump file to a privileged path, such as:
documents and settings\administrator\drwatson\
Or cancel the Create Crash Dump File option.
2. Delete registry entries.
hkey_local_machine\software\microsoft\windows nt\currentversion\aedebug]
under the phase key value.
3. Use other debugging tools. And set it correctly in the registry.
-
Anonymous users2024-02-04is a Microsoft dr watson error debugger. It is very important for the program to provide technical support to the user. If this kind of problem occurs, it means that there is a serious error in the system, and the possibility of debugging and fixing it is small, you can try to enter the safe mode with some repair tools, and if there is a registry backup, you can try to restore it.
Of course, the best way is to back up the important data of the system disk, and reinstalling a system is the best solution, although reinstalling is a bit old-fashioned, but it is the most thorough way to solve the problem. I wish you success!
I'm confused by your narrative. It's too simple. It's too unspecific. >>>More
Have you turned on sharing, and if so, turn it off.
Then enter: 100 >>>More
The advantage of the brand is that the after-sales service is good, and there is no problem with it. >>>More
<> I think you yourself misunderstood the meaning of performance in this task manager. >>>More
For the choice of CPU, it is not blindly that the more cores the better, the opportunity to use 4 cores is too few and too few, the product of the Phenom II is a good choice, the large cache, comparable to the products above the Core 2 E series, I recommend you to choose the Phenom II X2 550 or 555, because these two dual-core products can achieve 4-core stability after overclocking), but the 3-core product has not heard much of overclocking, and the motherboard 770 is still good, but if you are ready for overclocking, use Gigabyte's, overclocking people use it,The graphics card doesn't know if you can buy this sapphire or not,You can also consider Sapphire HD5570 1G DDR3 HDMI Platinum Edition or Weconex Leilong R5670-HM1024GD5 Speed Edition,In 3D rendering, it is slightly worse than 4830 (it can't be distinguished by the naked eye),But 3D APIs are all DirectX 11,And the core frequency and memory frequency are better than 4830,It has been integrated or supports the expansion of the maximum 1G video memory,**Same。 >>>More