CVE-2008-5044 Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx....
MediumCVSS 4.0
EPSS 1.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
References
- killprog.com exploit
- 4576 third-party-advisory
- 20081109 BSOD in Win'2k3, Vista x86 and x64 by nonpriviledged user mailing-list
- 32206 exploit vdb-entry
- win-unhookwindowshookex-dos(46506) vdb-entry