اسیب پذیری جدید در ویندوز :Vulnerability in Graphics Rendering Engine

[r00tkit]

امروز :

Microsoft Security Advisory (2490606)

Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution

Published: January 04, 2011

منبع : http://www.microsoft.com/technet/security/advisory/2490606.mspx

[r00tkit]

There is currently no patch available. However, it is possible to modify the access control list on shimgvw.dll to prevent rendering of thumbnails (this would affect all thumbnails, not just malicious once). See the Microsoft advisory for details.

[Mehdi Asgari]

در واقع کشف این آسیب پذیری، سال قبل انجام شد:
ارائۀ A Vulnerability in My Heart نوشتۀ Moti & Xu Hao رو ببین