NtSetInformationObject() Does Not Check Object Handle in C2 Security Services (241414)
The information in this article applies to:
- Microsoft Windows NT Server 4.0 Terminal Server Edition
- Microsoft Windows NT Server 4.0
- Microsoft Windows NT Workstation 4.0
- Microsoft Windows NT Server, Enterprise Edition 4.0
This article was previously published under Q241414 SYMPTOMS
When you are processing a program with Microsoft C2 Security Services (C2SS) on a computer running Windows NT 4.0, the NtSetInformationObject function does not check to verify that a caller remains with the original handle and does not change from a user-mode handle to a kernel-mode handle. Because of the upcoming access-mode changes to object handles, it is important that NtSetInformationObject perform this check for object handle protection.
RESOLUTIONWindows NT Server or Workstation 4.0
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or
the individual software update. For information on obtaining the
latest service pack, please go to:
For information on obtaining the individual software update, contact Microsoft
Product Support Services. For a complete list of Microsoft Product Support
Services phone numbers and information on support costs, please go to the
following address on the World Wide Web:
Windows NT Server 4.0, Terminal Server EditionTo resolve this problem, obtain the latest service pack for Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the
Microsoft Knowledge Base:
152734 How to Obtain the Latest Windows NT 4.0 Service Pack
STATUSMicrosoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition.
This problem was first corrected in Windows NT Server 4.0 Service Pack 6 and Windows NT Server 4.0, Terminal Server Edition Service Pack 6.
| Modification Type: | Major | Last Reviewed: | 11/20/2002 |
|---|
| Keywords: | kbbug KB241414 |
|---|
|