Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3981. PoCs published by Nima Salehi.
AI-analyzed exploit summary This exploit demonstrates a local denial-of-service vulnerability in Microsoft Windows by calling CreateRemoteThread with an invalid address (100) in a target process. It enumerates processes, opens a handle with PROCESS_ALL_ACCESS, and injects a thread to crash the process or system.
Description
NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
Exploits (1)
This exploit demonstrates a local denial-of-service vulnerability in Microsoft Windows by calling CreateRemoteThread with an invalid address (100) in a target process. It enumerates processes, opens a handle with PROCESS_ALL_ACCESS, and injects a thread to crash the process or system.