CVE-2011-1974: Undefined Security Weakness

NDISTAPI.sys in the NDISTAPI driver in Remote Access Service RAS in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "NDISTAPI Elevation of Privilege Vulnerability."...

Microsoft Windows Ndistapi本地拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的NDISTAPI.sys驱动实现机制上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Windows的NDISTAPI.sys驱动是内核态组件，但允许非特权用户的访问，因此任意用户态应用程序都可以向这个设备写入数据： Ndistapi.sys Windows XP SP2 ; stdcall NdisTapiDispatchx, x .text:000115E8 NdisTapiDispatch@8 proc near ; DATA XREF:...

CVE-2007-1537: Undefined Security Weakness

\Device\NdisTapi NDISTAPI.sys in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function...

[Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation

MICROSOFT WINDOWS Ndistapi.sys IRQL escalation Ruben Santamarta ruben at reversemode dot com Email concealed Affected products: Microsoft Windows XP SP2 Microsoft Windows 2003 Server SP1 Introduction ------------- NDISTAPI.sys is a kernel-mode component that exposes connectionless miniport driver...