Microsoft Windows Aero Theme DoS vulnerability
Original title: ZDI-26-868: Microsoft Windows Aero Theme Improper Handling Of Error Condition Denial-of-Service Vulnerability
ZDI-26-868 rated 4.7; local attackers can trigger denial-of-service after obtaining low-privileged code execution.
The ZDI reports an improper handling of error condition in Microsoft Windows Aero Theme that allows local attackers to create a denial-of-service condition. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. No fixed version or further mitigation details provided.
Unconfirmed: No fixed version stated
- Allows local DoS
- Requires low-privileged code execution
- Aero Theme component
- CVSS 4.7
- Affects installations of Microsoft Windows
Impact: denial-of-service condition
From the original article
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.