New Windows 0day in CreateDIBPalette()

I’ve seen several reports of a new 0day hole in Windows, which seems to affect all versions from XP SP3 to Win7.

Original posting is by someone who calls him(her?)self Arkon.

Best overview I’ve seen is on Secunia’s site.

No CVE number as yet, and it hasn’t appeared on SANS ISC, but this sounds like the genuine article.

Stay tuned….