[Alex]

Does anyone of you researched these vulnerabilities - Microsoft Windows "SfnLOGONNOTIFY()" and "SfnINSTRING()" Denial of Service?

On exploit-db.com there are exploits written by MJ0011:
Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability
Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability.

I tested them on Windows XP SP2 and can't reproduce BSoDs.

Alex

[EP_X0FF]

Windows XP SP3.

It works :)

Code: Select all

PostMessage (hwnd, 0x18d, 0x0, 0x80000000); 

Resulting in BSOD.

[Alex]

Thanks EP_X0FF for testing! It looks like I have to update OS ;)

Alex