Secunia

A vulnerability has been discovered in Microsoft Windows, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a user's system.

The vulnerability is caused due to an error while drawing in kernel space by using the Canonical Display Driver (cdd.dll). This can be exploited to dereference invalid memory in a write operation and corrupt kernel memory.

Successful exploitation may allow execution of arbitrary code, but requires that the user e.g. renders specially crafted images using IrfanView.

The vulnerability is confirmed on a local account on a 64-bit Windows 7 and additionally reported in Windows Server 2008 R2 for x64 or Itanium systems with Windows Aero enabled (disabled by default).

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Originally reported through an IrfanView forum. Reported via Secunia by Irfan Skiljan.

The vendor credits David Hansel, Reactive Systems.

Changelog
Further details available in Customer Area

Original Advisory
MS10-043 (KB2032276):
http://www.microsoft.com/technet/security/bulletin/ms10-043.mspx

IrfanView forum:
http://en.irfanview-forum.de/vb/showthread.php?4167-Win-7-Blue-Screen-(cdd-dll)

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area