Home » Hacking News » Microsoft Windows EngTextOut denial of service

Microsoft Windows EngTextOut denial of service

by Mario Miri on April 25th, 2003 EngTextOut function in some versions of Microsoft Windows suffers from denial of service vulnerability. If the function receives non-ASCII input, the operating system crash follows.

Vulnerable:
Microsoft Windows .NET Datacenter Server Beta 3
Microsoft Windows .NET Enterprise Server RC2
Microsoft Windows .NET Enterprise Server Beta 3
Microsoft Windows .NET Standard Server Beta 3
Microsoft Windows .NET Web Server Beta 3
Microsoft Windows Server 2003
Microsoft Windows XP Home
Microsoft Windows XP Professional


Solution:
Currently there are no vendor supplied patches.


Discovered by:
[email protected]

From the forum

The forums are now OPEN AGAIN!

Xatrix.org © Copyright 2001-2016, Xatrix Security . All Rights Reserved
Most hackers are young because young people tend to be adaptable. As long as you remain adaptable, you can always be a good hacker. - Emmanuel Goldstein