MS.Canonical.Display.Code.Execution

Release Date Jul 15, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against an integer-overflow vulnerability in the Windows Canonical Display Driver, which may lead to arbitrary code execution.
Affected Products Windows 7 for x64-based Systems Windows Embedded Standard 7 for x64-based Systems Windows Server 2008 R2 for x64-based Systems
Recommended Actions Apply the patch supplied by the vendor: http://www.microsoft.com/technet/security/Bulletin/MS10-043.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-3678
Reference/s http://technet.microsoft.com/en-us/security/bulletin/ms10-043.mspx (MS-ID) http://www.securityfocus.com/bid/40237 (BugTraq)

Fortinet