Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow

/ Windows TCP/IP source routing poc C version... by Preddy RootShell Security Group Shoutz 2: Jimmy and ByteCoder + Rs Crew + Rest of the world :D Compile: gcc win-tcpip-dos.c -o wintcpipdos Info: Published: 14.06.2006 Source: ANDREYMINAEV Type: remote Level: 9/10 Buffer overflow on ICMP packets...

Server crash on ICMP packets with Loose Source and Record Route IP options.

Short message translation: There are DoS conditions in Windows 2000 built-in NAT server. Tested configuration: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 with NAT server enabled. While routing packets with options "Loose Source and Record Route"...

bsod in win32k.sys(Multi-User Win32 Driver)

Hello vuln, OS: Microsoft Windows XP, SP2, other not tested VULNERABILITY: file : win32k.sys version : 5.1.2600.2180 xpspsp2rtm.040803-2158 description : Multi-User Win32 Driver author : 6star aka mg BUG DESCRIPTION: When you try HOW TO CHECK: 1. Click on Desktop to call Context Menu. 2. Then...

Compuware SoftIce debugger debug message driver DoS

BSOD on invalid debug message pointer...

Windows 2003 win2k.sys vulnerability

BRIEF SYNOPSIS SUMMARY Under Windows NT5.2, all software that uses "EngTextOut" are exposed to BSOD when attempting to print non-ASCII characters. POINT OF INTEREST "win32k.sys" at 0xbf8bc8d7 Tue Mar 25 00:40:49 2003. IMPLICATIONS Envisage it. SYSTEMS AFFECTED Windows 2003 web...

MS02-063 PPTP Malformed Control Data Kernel Denial of Service

This module exploits a kernel based overflow when sending abnormal PPTP Control Data packets to Microsoft Windows 2000 SP0-3 and XP SP0-1 based PPTP RAS servers Remote Access Services. Kernel memory is overwritten resulting in a BSOD. Code execution may be possible however this module is only a...

anonymous SMBwriteX DoS

a new concept had to be invented for this one: "the BSOD". a problem that causes an nt5 server's screen to go black. here is a harmless SMB request, prepared earlier from a netmon capture: SMB C write & X, FID = 0x1801, Write 0x73 at 0x00000000 SMB: C write & X, FID = 0x1801, Write 0x73 at...