Microsoft Windows Kernel Local Denial of Service Vulnerability

Bugtraq ID:	11365
Class:	Design Error
CVE:	CVE-2004-0211
Remote:	No
Local:	Yes
Published:	Oct 12 2004 12:00AM
Updated:	Dec 10 2008 11:32PM
Credit:	Discovery is credited to hlt <[email protected]>.
Vulnerable:	Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Datacenter x64 Edition Avaya S8100 Media Servers 0 + Microsoft Windows 2000 Server + Microsoft Windows NT Server 4.0 SP6a Avaya S3400 Message Application Server 0 + Microsoft Windows 2000 Server Avaya Modular Messaging (MSS) 2.0 Avaya Modular Messaging (MSS) 1.1 Avaya IP600 Media Servers Avaya DefinityOne Media Servers
Not Vulnerable:

Microsoft Windows Kernel Local Denial of Service Vulnerability

The Microsoft Windows kernel is prone to a denial-of-service vulnerability that can allow a local attacker to cause a vulnerable computer to stop responding and to restart.

This issue does not pose a privilege-escalation threat.

Microsoft Windows Kernel Local Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Kernel Local Denial of Service Vulnerability

Solution:
Microsoft has released a bulletin that includes fixes to address this issue for supported versions of the operating system.

Microsoft Windows Kernel Local Denial of Service Vulnerability

References:

• Microsoft Security Bulletin MS04-032 (Microsoft)