Microsoft said it is investigating an unpatched weakness in Windows after an Israeli researcher exposed a bug in OS's kernel driver.
As per the Gil Dabah, an investigator from Tel Aviv who goes by the pet name "arkon," the Windows' kernel harbors a mound run over vulnerability. Dabah as well posted a tiny evidence-of-concept to reveal the bug on Rage Storm, a site he and two others run.
"Microsoft is investigating reports of a potential vulnerability in Windows Kernel," said Jerry Bryant on Friday. "Upon conclusion of the investigation, Microsoft will take suitable actions to protect customers."
In an alert published, Danish bug chaser Secunia located the bug in the "Win32k.sys" kernel-mode device driver, the kernel element of the Windows subsystem. Attackers can utilize the fault using "Get Clip board Data," an API (application programming interface) that recovers data from the Window clipboard.
A successful exploit will permit hackers to perform their assault code in kernel mode, which would then let them contaminate the PC with malware or plunder any data on the machine. The fault exists in some versions of Windows, as well as XP SP3, Server 2003 R2, Vista, Windows 7 and Windows Server 2008 SP2, said Secunia, which rated the bug as "less critical," the corporation's second-lowest threat ranking.



Reply With Quote
Copyright Techfuels
Bookmarks