Windows Kernel Image File Vulnerability reveals serious security problems

In March 10, Microsoft finally completed eight security vulnerabilities, including a critical security vulnerability, the Windows Kernel processing Image File Vulnerability.

One of the most serious security vulnerabilities is the Windows kernel's graphical device interface (GDI) processing of certain image file vulnerabilities.

IBM's X-Force Research Team also pointed out a more serious security issue

Holly Stewart, manager of ibm x-Force Threat Response, said on SecurityFocus that this vulnerability can be used by many attack media, even if the vulnerability of malicious images has existed for a while, however, many end users still seldom care about the running status of such files or other seemingly friendly files.

Microsoft commented that the attack exploitation code may be inconsistent among the two kernel processing vulnerabilities. However, according to Microsoft's summary, these eight vulnerabilities are not often exploited.

In this announcement, the first three vulnerabilities occurred on the Domain Name System (DNS) server, and the last four vulnerabilities were on the WINS server, in addition, it can allow the spoofed network to submit the returned information, and allow the virus and redirection attacks. In the announcement summary, Microsoft pointed out that the severity of the last four vulnerabilities is the most important.