Security bug in Windows 7 detected

Powered by SC Magazine
 

Exploited via Apple's Safari browser.

Security vendors have expressed concerns about the disclosure of a Windows vulnerability that can be exploited through Apple's Safari browser.

First highlighted by Twitter use ‘webDEViL', the flaw causes a blue screen of death on Windows 7 x64 via Safari. Asked how he had discovered this flaw, the user replied: "Persistence. Perseverance."

According to German threat report H security, the source of the vulnerability is the function NtGdiDrawStream, and Heise Security has been able to reproduce the problem. The 32-bit version is not affected, testers said.

Vulnerability management firm Secunia has released an advisor, noting that the flaw is caused by a weakness in the driver file of Win32. It can be exploited to corrupt memory via a specially crafted web page, containing an IFRAME with an overly large ‘height' attribute, when viewed using the Apple Safari browser.

“Successful exploitation may allow execution of arbitrary code with kernel-mode privileges. The vulnerability is confirmed on a fully patched Windows 7 Professional 64-bit. Other versions may also be affected,” said a spokesperson for Secunia.

A Microsoft spokeswoman did not immediately respond to a request by SC Magazine for comment, but other reports suggest the software giant is looking into the matter.

Chatting to SC Magazine, webDEViL indicated that he has not contacted Microsoft as "they take too much time to patch and we get too little credit".

Asked if he was aware of this flaw affecting other browsers, he said: “This is not really a browser flaw. It affects Win 7 kernel and one possible way of triggering this is using Safari.”

Finally, he was asked if he was aware if this vulnerability has a wider scope other than the blue screen of death. He said he was not aware, but that it was a possibility.

“If someone [were] to develop a working exploit, this would execute stuff with kernel privileges bypassing a lot of restrictions,” he said.

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, US edition


Security bug in Windows 7 detected
 
 
 
Top Stories
ATO investigates 25 tech giants in tax hunt
Prepared to take tax evaders to court.
 
Immigration, Customs restructure IT leadership
Customs CIO promoted into transformation role.
 
NBN Co begins FTTB rollout
Will bring service to 6000 apartments.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  36%
 
Your insurance company
  5%
 
A technology company (Google, Facebook et al)
  9%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  4%
 
A Federal Government agency (ATO, Centrelink etc)
  18%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  7%
TOTAL VOTES: 2942

Vote
Do you support the abolition of the Office of the Information Commissioner?

   |   View results
I support shutting down the OAIC.
  27%
 
I DON'T support shutting the OAIC.
  73%
TOTAL VOTES: 918

Vote