16th Apr 2003 [SBWID-6159]
COMMAND
Windows 2003 win2k.sys vulnerability
SYSTEMS AFFECTED
SYSTEMS AFFECTED
Windows 2003 web server/server/enterprise (RTM and all betas)
Windows .NET (all betas)
Windows Whistler (all betas)
SYSTEMS NOT AFFECTED
Windows 2000 SP3 and earlier
Windows NT4
Windows 9x
PROBLEM
[securityfocus.com(at)xlat.cjb.net] reported:
Under Windows NT5.2, all software that uses "EngTextOut" are exposed to
BSOD when attempting to print non-ASCII characters.
Point of interest:
"win32k.sys" at 0xbf8bc8d7
SOLUTION