Privacy News PoC Code Published for Triggering an Instant BSOD on All Recent Windows Versions

[LASER_oneXM]

Content source

https://www.bleepingcomputer.com/news/microsoft/poc-code-published-for-triggering-an-instant-bsod-on-all-recent-windows-versions/

A Romanian hardware expert has published proof-of-concept code on GitHub that will crash most Windows computers within seconds, even if the computer is in a locked state.
The code exploits a vulnerability in Microsoft's handling of NTFS filesystem images and was discovered by Marius Tivadar, a security researcher with Bitdefender.

NTFS bug and Windows autoplay feature don't go well together

The expert's PoC contains a malformed NTFS image that users can take and place it on a USB thumb drive. Inserting this USB thumb drive in a Windows computer crashes the system within seconds, resulting in a Blue Screen of Death (BSOD).
...
... ...

Microsoft declined to fix

Tivadar contacted Microsoft about the issue in July 2017, but published the PoC code today after the OS maker declined to classify the issue as a security bug.
Microsoft downgraded the bug's severity because exploiting it requires either physical access or social engineering (tricking the user).
....
....

"I strongly believe that this behavior should be changed, [and] no USB stick/volume should be mounted when the system is locked," the researcher said. "Generally speaking, no driver should be loaded, no code should get executed when the system is locked and external peripherals are inserted into the machine."

Tivadar published two videos on his personal Google Photos account showing the NTFS bug crashing a PC in normal and locked down states. Another PoC is also available on his Google Drive account.

For now, Tivadar's PoC will become one of the hottest pieces of code on GitHub, as any prankster will be looking to add it to his arsenal.

 

[upnorth]

For now, Tivadar's PoC will become one of the hottest pieces of code on GitHub.

GitHub :

anybody succeed?

Spoiler

 

[ForgottenSeer 69673]

What would anyone have to gain by crashing PC's?

 

[shmu26]

It is not very hard to crash Windows. There is hardly anyone in the world who has not done it.

 

[cruelsister]

There is a follow-up to this one:

"PC REBOOTS WHEN RESET BUTTON IS PRESSED"

Oh God, NO!!!!!

 

[bribon77]

Well, in that sense, I consider myself an expert. ... I press the button to turn it off and automatically, it turns off, I do not need any USB.

 

[Deleted member 178]

What would anyone have to gain by crashing PC's?

scamming noobs ^^

 

[ForgottenSeer 69673]

There is a follow-up to this one:

"PC REBOOTS WHEN RESET BUTTON IS PRESSED"

Oh God, NO!!!!!

Wow I have not seen a reset button in years.