You are not registered yet. Please click here to register!
[] Windows 7 Plus Web Browser Plus Special Sauce Make Simple Blue Screen Recipe! - - different look at memory


Thread Tools
Old 22-12-2011, 06:51 PM   #1
News Hound
News's PC Specs
Join Date: May 19 2008
Posts: 61,102
[] Windows 7 Plus Web Browser Plus Special Sauce Make Simple Blue Screen Recipe!

To make this delicious poison dish, simply take a large dollop of Windows 7 Professional, mix it with a portion of Safari and add a dash of special iFrame sauce and voila! instant Blue Screen of Death. The flaw is triggered by running Apple's Safari web browser on a fully patched 64-bit Windows 7 Professional, then feeding it a web page containing a simple iFrame with an overly long height attribute, like this: < iframe height='18082563'> (remove the space after the first angle bracket) Result: Windows 7 falls over instantly with a memory corruption error. Ouch. Interestingly, it seems that 32-bit Windows 7 doesn't suffer from this vulnerability and neither does XP SP3 32-bit, although this is by no means certain at this point. The flaw appears to be in the win32k.sys kernel-mode driver, which is a common source of critical Windows vulnerabilities. It was first reported by Twitter user webDEViL (@w3bd3vil) and being a zero day vulnerability, there's currently no fix or workaround for it. However, the worst part about this critical vulnerability, is that Safari runs 100% in User Mode, which is effectively a type of sandbox, preventing an application from bringing down Windows, regardless of what it does. There's obviously a little loophole here though.

News is offline   Reply With Quote


blue, browser, make, recipe, sauce, screen, simple, special, techpowerupcom, web, windows

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools

Similar Threads for: [] Windows 7 Plus Web Browser Plus Special Sauce Make Simple Blue Screen Recipe!
Thread Thread Starter Forum Replies Last Post
[] (PR) Microsoft Delivers Pre-Beta of Windows 7 to Developers and Previews Web Applications News Reviews & News Online 0 29-10-2008 11:32 AM
[] Windows 7 Stays as the Product's Final Name News Reviews & News Online 0 15-10-2008 03:10 AM
ATi Cat 8.4 on the ATi download site. necron66 Video Cards 1 17-04-2008 09:59 PM
The Desktop Files: Dual Booting with Windows XP and Windows PE 2.0 eva2000 Operating systems 0 15-03-2008 05:34 PM

All times are GMT +11. The time now is 08:34 AM.