win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/35121 | vdb entry exploit |
http://bugtraq.ru/cgi-bin/forum.mcgi?type=sb&b=2&m=152274 | exploit |
http://www.securityfocus.com/data/vulnerabilities/exploits/35121.c | exploit |