Security - Microsoft Windows Bluetooth Driver Object Handling Vulnerability

Description
A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the Bluetooth driver when handling certain objects. This can be exploited to access an uninitialised or deleted object via specially crafted Bluetooth packets.

Successful exploitation requires the Bluetooth driver to be enabled, which is automatically installed when a Bluetooth device is added.

Solution

Provided and/or discovered by
Reported by the vendor.

Original Advisory
MS11-053 (KB2561109, KB2532531):
http://www.microsoft.com/technet/security/Bulletin/MS11-053.mspx

Comments