[VIM] CVE-2010-1795 vs CVE-2010-1894

[George A. Theall]

On Jan 20, 2011, at 7:01 PM, Steven M. Christey wrote:

>
> George,
>
> I assume you mean CVE-2010-1735 instead of CVE-2010-1795?   
> CVE-2010-1795 is a DLL injection issue in iTunes :)

Yes, I'm sorry for adding to the confusion.

> I don't know if these are the same or not.  CVE-2010-1734 also  
> affects win32k.sys with the same results, and it looks like  
> win32k.sys has gotten a good deal of attention in the last year or so.
>
> Time to consult with Microsoft...

Thanks for checking it out.

George
-- 
theall at tenablesecurity.com