Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Security bug bites 64-bit Windows 7

19 May 2010   #1

Windows 7 Ultimate x64.
Security bug bites 64-bit Windows 7

Microsoft on Tuesday warned users of a vulnerability in 64-bit versions of Windows 7 and Windows Server 2008 R2 that could expose users to malware attacks.

Exploitation of the bug in the Canonical Display Driver would most likely cause vulnerable machines only to reboot, Microsoft spokesman Jerry Bryant said in a blog post. But it could also be abused to silently install malware, although attackers first would have to bypass memory randomization protections baked in to the operating systems to prevent code execution attacks, he added.

The vulnerability stems from the Canonical Display Driver's failure to properly parse information copied from user mode to kernel mode. Malicious hackers could exploit it by tricking a victim into viewing a booby-trapped image file on a website or in email. The driver emulates the Windows XP display driver for interactions with earlier Windows graphics engines.

Bryant said a patch would be forthcoming, but didn't say when. In the meantime, users can prevent attacks by disabling the Windows Aero Theme. To turn it off, choose Start > Control Panel and click on Appearance and Personalization. Then click on Change the Theme. Then select one of the Basic and High Contrast Themes.

My System SpecsSystem Spec
19 May 2010   #2

Windows 7 & Windows Vista Ultimate

From Security Research & Defense : CDD.dll vulnerability: Difficult to exploit:

Since becoming aware of the forum discussions, we have been looking for ways to hit this vulnerability with Microsoft software. So far, we haven’t found a remote vector. We’re still looking and meanwhile managed to hit the vulnerable code by executing a specially-crafted program on a machine in the following configuration:
  • Windows 7 X64 machine
  • WDDM 1.1 capable video card (DirectX 10, DirectX 10.1, DirectX 11)
  • Aero glass theme enabled
Therefore, a malicious attacker able to logon locally to a vulnerable machine matching the above criteria could run a malicious executable to trigger this issue. Users of third-party image viewers may be vulnerable to this issue when viewing an untrusted image with a third-party image viewer locally on the machine.
{bold added}
My System SpecsSystem Spec
20 May 2010   #3

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]

My System SpecsSystem Spec


 Security bug bites 64-bit Windows 7

Thread Tools

Similar help and support threads
Thread Forum
win 7 64 Bites alternatives for XXamp en Wamp Server
Hi, i just started with my new website; but running a localhost is not working out. Both wamp and Xxamp versions aren t running on both my Windows 7 Home Premium based computers. I have set all the services necessary to automatic and I m running Microsoft security essiantals as my antivirus Is...
Th Dinosaur bites back - Windows 2000 on a VM STILL faster than W7 (x-32)
Hi all OK I know that I can't run some new stuff on W2K but as a little experiment I tried running some things like EXCEL on W2K and a 32 bit W7 version - the official buid 7000 . Office 2003 still runs on Windows 2000 BTW. W2K with SP4 fixes seem to beat W7 by quite a long way even...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 18:13.
Twitter Facebook