From: /m 


http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1206348,
00.html

===
Multiple versions of Microsoft Windows are vulnerable to a NULL pointer
dereference error in the server driver, which attackers could exploit to
crash a system using a specially crafted network packet. Atlanta-based
vendor Internet Security Systems' (ISS) X-Force uncovered the glitch and
released details Friday in an advisory, warning that an exploit is
available in the wild.

"Attackers can reliably cause Microsoft Windows to [go to a] blue
screen," ISS said. "Users must reboot to recover from the crash …
As of this writing no patch is available for the vulnerability."

ISS said the security hole affects: Microsoft Windows 2000 SP4
Microsoft Windows Server 2003
Microsoft Windows Server 2003 Itanium Microsoft Windows Server 2003 SP1
Microsoft Windows Server 2003 SP1 Itanium Microsoft Windows Server 2003 x64
Edition Microsoft Windows XP Pro x64 Edition Microsoft Windows XP SP1
Microsoft Windows XP SP2
===

 /m

--- BBBS/NT v4.01 Flag-5