CVE-2006-2373

This exploit demonstrates a deadlock vulnerability in MRXSMB.SYS via the NtClose function by creating a thread and manipulating a device handle through a specific IOCTL (0x141047). The exploit causes a denial-of-service condition by triggering a deadlock in the kernel driver.

This exploit targets a vulnerability in Mrxsmb.sys on Windows XP SP2 and Windows 2000 SP4, allowing local privilege escalation to ring0 by overwriting a driver call. It uses a privileged IOCTL to manipulate memory and execute arbitrary ring0 shellcode.