Hi Yash,

> Severity: Critical
> Platforms Affected:
>
> Microsoft Corporation: Windows 98 Any version
> Microsoft Corporation: Windows Me Any version
> Microsoft Corporation: Windows XP Any version
> Microsoft Corporation: Windows 2000 Any version
[CUT]
...

You are talking about a documented feature, neither a flaw nor a
vulnerability. How can be an API rated?

>Vendor Response:

>No Response from Vendor yet

I cannot imagine Windows with BitBlt disabled... :)

This is a known method widely used in banking trojans since a long time
ago.

Anyway, thanks for sharing your research.

cheers,
- Rubén.

[ reply ]