bugtraq - Windows 2003 win2k.sys vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030414183833.6349.qmail@www.securityfocus.com>
Date: 14 Apr 2003 18:38:33 -0000
From: <securityfocus.com@...t.cjb.net>
To: bugtraq@...urityfocus.com
Subject: Windows 2003 win2k.sys vulnerability






BRIEF SYNOPSIS



SUMMARY

     Under Windows NT5.2, all software that uses "EngTextOut" are
     exposed to BSOD when attempting to print non-ASCII characters.


POINT OF INTEREST

     "win32k.sys" at 0xbf8bc8d7 (Tue Mar 25 00:40:49 2003).


IMPLICATIONS

     Envisage it.


SYSTEMS AFFECTED

     Windows 2003 web server/server/enterprise (RTM and all betas)
     Windows .NET (all betas)
     Windows Whistler (all betas)


SYSTEMS NOT AFFECTED

     Windows 2000 SP3 and earlier
     Windows NT4
     Windows 9x