Rubén Santamarta has reported a vulnerability in Microsoft Windows, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the handling of data sent to the "\Device\NdisTapi" device. This can be exploited to crash a vulnerable system by sending arbitrary data to the said device.

The vulnerability is reported in Microsoft Windows XP SP2 and Microsoft Windows 2003 Server SP1. Other versions may also be affected.

Solution
Restrict access to trusted users only.
Further details available in Customer Area

Provided and/or discovered by
Rubén Santamarta

Changelog
Further details available in Customer Area

Original Advisory
http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=47

Deep Links
Links available in Customer Area