Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft Windows MSGINA.DLL Read-Lock Denial Of Service Vulnerability

It has been reported that Microsoft Windows 2000 Servers and XP Pro are prone to a denial of service due to a problem with 'MSGINA.DLL'. This condition may be triggered by users who can successfully login to the server via RDP or ICA.

'MSGINA.dll' is the vendor-supplied Graphical Identification and Authentication dynamic-link library.

If a malicious user causes a read-lock to be placed on '%SYSTEMROOT%\SYSTEM32\MSGINA.DLL', the next user logging in will be prompted with a dialog stating that 'MSGINA.DLL' failed to load and will be given the opportunity to restart the system.







 

Privacy Statement
Copyright 2009, SecurityFocus