On: Windows System Exploit

[thedudemabry]

Agreed. Raymond Chen refers to these types of problems as involving "being on the other side of this airtight hatchway": http://blogs.msdn.com/b/oldnewthing/archive/2010/05/11/10009...

[JoachimSchipper → thedudemabry]

That's not entirely true - non-privileged local users are not supposed to be able to bluescreen the system. Note that, e.g. Terminal Server exists.

[mjpa → JoachimSchipper]

You can cause a blue screen by trying to copy the device context of the screen to itself with BitBlt - a stupid thing to do but still causes a blue screen

[potkor → mjpa]

Sounds interesting. Anyone else have evidence for Microsoft's policy of ignoring local DoS vulns?

[kevingadd → mjpa]

That sounds like a video driver bug, though.

[kyberias → mjpa]

Most probably not universally true. Care to provide more information?

[potkor → thedudemabry]

Actually, Chen implies that it would be a security bug if an unprivileged user could do it on her own:

"Enabling the kernel debugger requires administrative privileges, so it's not like unprivileged users can force a system halt on their own".