Microsoft Windows XP/Vista/7/Server 2003/2008 win32k.sys buffer overflow

VulDB: Microsoft Windows XP/Vista/7/Server 2003/2008 win32k.sys buffer overflow

General

Microsoft

scipID: 5653
Affected: Microsoft Windows XP/Vista/7/Server 2003/2008
Published: 07/10/2012 (Nicolas Economou)
Risk: critical
Entry: 91.2% complete
Created: 07/12/2012
Updated: 09/03/2012

Summary

A vulnerability classified as critical was found in Microsoft Windows XP/Vista/7/Server 2003/2008. Affected by this vulnerability is an unknown function of the file win32k.sys. The manipulation with an unknown input leads to a buffer overflow vulnerability. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was presented 07/10/2012 by Nicolas Economou with Core Security Technologies as MS12-047 as bulletin (Microsoft Technet). The advisory is shared for download at technet.microsoft.com. The public release was coordinated in cooperation with Microsoft. This vulnerability is known as CVE-2012-1890 since 03/22/2012. The exploitability is known to be difficult. The attack can be launched remotely. The exploitation doesn’t need any form of authentication. Technical details and also a private exploit are known.

Applying the patch MS12-047 is able to eliminate this problem. The bugfix is ready for download at technet.microsoft.com. A possible mitigation has been published immediately after the disclosure of the vulnerability. The vulnerability is also documented in the vulnerability database at OSVDB (83659).