That's what happens when you play around too much with drivers...

http://www.securityfocus.com/bid/11628/discussion/

i think thats old tho, i remember the story,think it was with the old drivers, once the exploit possibility became known afaik they 'fixed' the code in the drivers

I remember another issue like this before too, but this one is dated recently, and they also say that a working exploit is in the wild, and that Symantec is analyzing it right now. But then again, you never know with these things, they have a tendency to quite easily become out-of-control rumours...

Starforce commented on this:
http://www.star-force.com/index.phtml?id=606&type=5&add=1&category=200

I have the exploit here if anyone's interested. It's sending a few device IO control requests. One of them containing an INT 3 handler. So I suppose you could inject an interrupt service routine using a device io control and from there do whatever you want. I did not test it.


hey this actually cross-references the other off-topic discussion