|22-12-2011, 06:51 PM||#1|
Join Date: May 19 2008
[Techpowerup.com] Windows 7 Plus Web Browser Plus Special Sauce Make Simple Blue Screen Recipe!
To make this delicious poison dish, simply take a large dollop of Windows 7 Professional, mix it with a portion of Safari and add a dash of special iFrame sauce and voila! instant Blue Screen of Death. The flaw is triggered by running Apple's Safari web browser on a fully patched 64-bit Windows 7 Professional, then feeding it a web page containing a simple iFrame with an overly long height attribute, like this: < iframe height='18082563'> (remove the space after the first angle bracket) Result: Windows 7 falls over instantly with a memory corruption error. Ouch. Interestingly, it seems that 32-bit Windows 7 doesn't suffer from this vulnerability and neither does XP SP3 32-bit, although this is by no means certain at this point. The flaw appears to be in the win32k.sys kernel-mode driver, which is a common source of critical Windows vulnerabilities. It was first reported by Twitter user webDEViL (@w3bd3vil) and being a zero day vulnerability, there's currently no fix or workaround for it. However, the worst part about this critical vulnerability, is that Safari runs 100% in User Mode, which is effectively a type of sandbox, preventing an application from bringing down Windows, regardless of what it does. There's obviously a little loophole here though.
|blue, browser, make, recipe, sauce, screen, simple, special, techpowerupcom, web, windows|
|Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)|
|Similar Threads for: [Techpowerup.com] Windows 7 Plus Web Browser Plus Special Sauce Make Simple Blue Screen Recipe!|
|Thread||Thread Starter||Forum||Replies||Last Post|
|[Techpowerup.com] (PR) Microsoft Delivers Pre-Beta of Windows 7 to Developers and Previews Web Applications||News||Reviews & News Online||0||29-10-2008 11:32 AM|
|[Techpowerup.com] Windows 7 Stays as the Product's Final Name||News||Reviews & News Online||0||15-10-2008 03:10 AM|
|ATi Cat 8.4 on the ATi download site.||necron66||Video Cards||1||17-04-2008 09:59 PM|
|The Desktop Files: Dual Booting with Windows XP and Windows PE 2.0||eva2000||Operating systems||0||15-03-2008 05:34 PM|
All times are GMT +11. The time now is 05:10 PM.