DeviceNdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Windows_2003_server | Microsoft | sp1 (including) | sp1 (including) |
Windows_xp | Microsoft | * | * |