The Broadband Guide
SG
search advanced

A simple HTML tag will crash 64-bit Windows 7

2011-12-21 11:58 by
Tags: ,

 

Security firm Secunia has reported that an unpatched security vulnerability in the 64-bit version of Windows 7 may be able to be exploited to inject and execute malicious code; currently, the only known exploit causes the system to crash.

The remotely exploitable vulnerability, caused by an error in win32k.sys, enables a hacker to run arbitrary code - such as malware - on a victim's machine when he or she visits a specially crafted Web page using Safari. Specifically, the Web page would simply need to contain an iFrame - an HTML element that is typically used to pull content from other sources onto a Web page - with an overly large "height" attribute.

The flaw works in the Apple Safari browser. There's no word on whether the error can be exploited in Internet Explorer, Mozilla Firefox or Google Chrome.

"The vulnerability is confirmed on a fully patched Windows 7 Professional 64-bit. Other versions may also be affected," Secunia said.

Read more -here-

 

  Post your review/comments
    rate:
   avg:
News Glossary of Terms FAQs Polls Cool Links SpeedGuide Teams SG Premium Services SG Gear Store
Registry Tweaks Broadband Tools Downloads/Patches Broadband Hardware SG Ports Database Security Default Passwords User Stories
Broadband Routers Wireless Firewalls / VPNs Software Hardware User Reviews
Broadband Security Editorials General User Articles Quick Reference
Broadband Forums General Discussions
Advertising Awards Link to us Server Statistics Helping SG About