A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a double-free error in the Client/Server Run-time Subsystem (CSRSS) within WINSRV.DLL when handling HardError messages.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

NOTE: Various other unspecified vulnerabilities discovered internally by Microsoft have also been reported.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Independently discovered by:
* NULL
* Tim Garnett, Determina Security Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-021 (KB930178):
http://www.microsoft.com/technet/security/Bulletin/MS07-021.mspx

Microsoft:
http://blogs.technet.com/msrc/archive/2006/12/22/new-report-of-a-windows-vulnerability.aspx

Full-Disclosure:
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051394.html

Determina Security Research:
http://www.determina.com/security.research/vulnerabilities/csrss-harderror.html

Deep Links
Links available to Secunia VIM customers