Microsoft warns graphics driver flaw could affect system security
Microsoft says hackers could exploit a flaw in a graphics driver for Windows 7 and Windows Server 2008 to affect the security of computer systems, but says such an attack would be "very difficult" to execute.
The vulnerability is found in the Canonical Display Driver for the systems, but only exists if the systems have the Windows Aero user interface installed.
Jerry Bryant, group manager of Response Communications at Microsoft's Security Response Center, wrote on his blog that while exploiting the issue could be "possible in theory," memory randomization would make it very difficult. Because it says the execution of the code is so unlikely, the company has rated the vulnerability a 3 on a scale of 1 to 3, where 3 means a hack is least likely.