Weiping Wen

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP SP3 **Description** An information disclosure issue exists due to improper validation of function parameters in Windows kernel-mode drivers. This allows an attacker to access data from any kernel-mode memory location, including access to the SAM file. A local user can exploit this by running a crafted application that triggers a NULL pointer dereference. **Recommendations** For Microsoft Windows XP SP3, consider restricting access to kernel-mode memory locations until a patch is available. As a temporary workaround, avoid using applications that trigger NULL pointer dereferences in the win32k.sys driver until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 **Description** An issue exists in the way the Windows Client/Server Run-time Subsystem (CSRSS) terminates a process when a user logs off, allowing local users to obtain sensitive information or gain privileges via a crafted application. This could enable an attacker to monitor the actions of a subsequent user, potentially disclosing sensitive information or accessing data that was accessible to the logged-on user, including logon credentials. If a user with administrative privileges logs on, the attacker could run arbitrary code in kernel mode. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003 version SP2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive data and limiting user privileges to minimize the risk of exploitation.