Microsoft probes new Windows kernel bug

Phone Man · 08 Aug 2010

According to http://secunia.com/advisories/40870/ the attack vector requires that the attacker is a local user on the system.

Jim

Win7User512 · 09 Aug 2010

Phone Man said:

According to Microsoft Windows win32k.sys Driver "CreateDIBPalette()" Buffer Overflow - Advisories - Community the attack vector requires that the attacker is a local user on the system.

Jim

Couldn't it be exploited remotely?

Edit:

Arkon said:

Anyway, it’s really funny for me to read that people say it’s exploitable, I am waiting to see an exploit, in the code execution sense. This is not trivial since every fourth byte that is copied is the value 4. And the memory block gets allocated per call, very hard to have any assumptions on it. But who am I to judge if Vupen said it’s exploitable, LOL.
Another thing – no one said how to temporarily avoid this vulnerability from occurring, if you change the clipboard access, or the access to change resolution then you’re good to go.

...

I know, I played with it myself.
It’s very hard to exploit it for code execution, on the edge of impossible. That’s why I felt safe about releasing it publicly

Still curious, if anybody is able to do it.

Phone Man · 09 Aug 2010

I am sure Secunia has tested the exploit and that was their findings.

Jim