Windows 7 affected by new zero-day vulnerability

[nsane.forums]

Microsoft’s Windows 7 operating system is vulnerable to a new zero-day vulnerability that exposes users to blue-screen crashes or code execution attacks. The flaw, could be exploited by local attackers to cause a denial-of-service or potentially gain elevated privileges, according to an advisory from VUPEN, a French security research outfit.From VUPEN’s advisory:

This issue is caused by a buffer overflow error in the “CreateDIBPalette()” function within the kernel-mode device driver “Win32k.sys” when using the “biClrUsed” member value of a “BITMAPINFOHEADER” structure as a counter while retrieving Bitmap data from the clipboard, which could be exploited by malicious users to crash an affected system or potentially execute arbitrary code with kernel privileges.

The flaw is confirmed on fully patched Microsoft Windows 7, Windows Server 2008 SP2, Windows Server 2003 SP2, Windows Vista SP2, and Microsoft Windows XP SP3.

Microsoft is investigating.

View: Original Article

[Sl@pSh0ck™]

what's new? :tooth:

[Bizarre™]

This is of no consequence to me since I do a manual update on a regular basis ^_^

[zombiegod]

thanx 4 the update

[jalaffa]

Should it be affected or effected in the headline? My gut feeling says affected. Unsure...

[HX1]

Should it be affected or effected in the headline? My gut feeling says affected. Unsure...

http://dictionary.reference.com/browse/effected

http://dictionary.reference.com/browse/affected

Think your right.. wouldn't post but I have this as a Search add-on.. because sometimes I wonder this too.. and things like it.. Thesaurus.com as well..

[jalaffa]

Thanks heath28m - changed it to affected by (2 vs. none in favour :D )

[HX1]

Thanks heath28m - changed it to affected by (2 vs. none in favour :D )

:thumbsup:

[DKT27]

Sorry my mistake. I changed the title of the original post from "dinged" to "effected" but was a spell mistake. Thanks for noticing. ;)