Microsoft Windows win32k.sys Driver 'CreateDIBPalette()' BOF Vulnerability

Summary
This host is prone to buffer ovreflow vulnerability.
Impact
Successful exploitation will allow attackers to crash an affected system or potentially execute arbitrary code with kernel privileges. Impact Level: System
Solution
Apply the latest updates from the below link. http://www.microsoft.com/en/us/default.aspx
Insight
The flaw is due to a buffer overflow error in the 'CreateDIBPalette()' function within the kernel-mode device driver 'Win32k.sys', when using the 'biClrUsed' member value of a 'BITMAPINFOHEADER' structure as a counter while retrieving Bitmap data from the clipboard.
Affected
Microsoft Windows 7 Microsoft Windows XP SP3 and prior. Microsoft Windows Vista SP 2 and prior. Microsoft Windows Server 2008 SP 2 and prior. Microsoft Windows Server 2003 SP 2 and prior.
References