Microsoft’s security response team မွ မၾကာေသးမီွအခ်ိန္တုိအတြင္းမွာ Windows 7 အသုံးၿပဳသူမ်ားအား blue-screen crashes or code execution attacks ကုိၿဖစ္ေပၚေစတတ္ေသာ အားနည္းခ်က္တစ္ခုကုိ ေတြ႔ရွိခဲ႔သည္။ ဒီအၿပစ္က Denial-of Service ႏွင့္ အၿခားေသာ user privileges ဆုိင္ရာမ်ားကုိ ၿဖစ္ေပၚေစႏုိင္တယ္လုိ႔ VUPEN Security - Vulnerability Research and Intelligence မွ ေၿပာၾကားခဲ႔ပါတယ္...
ဒီၿပႆနာက Clipboard မွ Bitmap Data ေတြကုိ ထုတ္ယူအသုံးၿပဳစဥ္ Win32k.sys ဆုိတဲ႔ kernel-mode device driver ဖုိင္ထဲမွ "CreateDIBPalette()" မွ buffer overflow ၿဖစ္ေပၚတာၿဖစ္ပါတယ္..
ဒီအၿပစ္က Windows 7, Windows Server 2008 SP2, Windows Server 2003 SP2, Windows Vista SP2, and Microsoft Windows XP SP3 ေတြမွာလည္း ၿဖစ္ေပၚပါတယ္... Microsoft အေနနဲ႔ မေန႔က (Tuesday August 10) ေန႔ထုတ္လုိက္တဲ႔ Windows, Microsoft Office, Internet Explorer, SQL and Silverlight မွ ၿဖစ္ေပၚေနတဲ႔ 34 ခုေသာ vulnerabilities မွာေတာ့ ဒီ ၿပႆနာကုိ ၿပဳၿပင္ေပးဖုိ႔ MS10-047 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852) ကုိ ထည့္ေပးထားတာ ေတြ႔ရပါတယ္.. . ဒါေပမဲ႔ အခုၿဖစ္ေပၚေနတဲ႔ Kernel-Mode driver ရဲ႕ buffer overflow ကုိၿပဳၿပင္ေပးႏုိင္မလားဆုိတာကုိေတာ့ ေစာင့္ၾကည့္ရဦးမွာၿဖစ္ပါတယ္။
Forward mail.
No comments:
Post a Comment