New local NT attack - TOCTOU (Time-Of-Check-to-Time-Of-Use race conditions) updated since 03.01.2004
Published:		12.05.2010
Source:		BUGTRAQ
SecurityVulns ID:		3342
Type:		local
Level:		6/10
Description:		If service hooks are used for argument filtering, race conditions are possible between argument check and actual sytem call.

Original document		Matousec - Transparent security Research, KHOBE - 8.0 earthquake for Windows desktop security software (12.05.2010)
		Andrey Kolishak, TOCTOU with NT System Service Hooking (03.01.2004)

Discuss:

Read or add your comments to this news (0 comments)