Win7 64-bit Vulnerable To A Simple HTML Tag

ThreatPost reported that the black hat researcher known as w3bd3vil released info on a newly discovered method to crash out a Windows 7 PC running in 64-bit mode.

"A vulnerability has been discovered in Microsoft Windows 7, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an error in win32k.sys and can be exploited to corrupt memory via e.g. a specially crafted web page containing an IFRAME with an overly large "height" attribute viewed using the Apple Safari browser. Successful exploitation may allow execution of arbitrary code with kernel-mode privileges," the Secunia advisory said.

Microsoft has not confirmed the vulnerability, but speculation is that they are racing to find the cause of this vulnerability before any seriously bad hackers find it.

Proof of concept has only been demonstrated on Safari browser running on 64-bit Windows 7, which is an unusual combination as Safari usage is only 9 to 11%, with most Safari users running Mac OS X. However, the vulnerability may affect other browsers too.

The full article can be read at http://gay.gl/hA