... ouuuuuZHH@Auuuuuu23; .:38A@NMMMMMNMMMMN22AMMMMNHHHH@A77;: ,;88bU78u338@HHHUu333ZEMMMMMMMMMMMMMNHU: 7bE877: .,;27, .;uu@MNR8888U8@MMMMMMMMUo .;283. :;72883,,,:;o732uR2RMMMMMMMMMNR. ,2E2, .: ;;: .28b822222222222RNMMMHRAAUo 7A8 .,2.o2; 72228@MMMMMMMME8uHMM@7 .oA2, .; .,72ubRU2;;;;322b@EEb3;oRNMN:. .;H, ,::,7: 8bAH2223 ;8oo38MH2. ;u8 :oo23: .2u8bbo, o2228Z7 , :AMMU. ::. ,::: . ;u8;;, :;;;bU2;;..;Z@; .NMNR H; , :ubUZ3; .;8::,.22;.;HNMH ;HZ, ;oo8Z; .. RNA:ZEMH 2M ,:: oZZ8Z8U8ENMH 2M ;. MMMH C:\> Deep Freeze (Hyper Technologies) 7M . ,oAMMMRZ22, ZEMH C:\> credits: ;M .8bAb, .7@MMMMMMMMM@8; ;bHo. C:\> Trespasser - tressykewl@yahoo.com ,uU: ;bMUo. 7MMMMMMMMMMMMMH8 3MM7. C:\> Severity : Low Ho. :UU@Eu. 7o: 7MMMMNEMNNMMMMMM 7EM@o C:\> frzstate.exe ;U2 .2AHME;. ,ZRRRNMHR,. ;MMMHEAHEEMMMMMN ,uMM3 C:\> Description: frzstate.exe password dialog vuln. u8u .; 3MMM3 .8NMMMMMMMMMA3. .3MMMMHRHMMMMME; 3MMA7 ZH7 ,2MM3 78MMMMMMMMMMMMMH7 .ZR@MMMMMHR3. ;bMM: ,o@u: .,;MM2 ZMMMMMMMMMMMMMMMN, .,77777;. ,AMN2. .EA3 88ZuHMb7 2HMMMMMMMMMMMMMMM, :MME2 .;ZRu3: . ,EA7 7bMMMMMMR@N@HMMNU. :NE2. 2@NMb; .:7bAb8,. .3. ,HNMMMMMMN@HHU; MMHA 7UMZ; .3uZ8bH, o2UMMMMHu3: uHMH7 ,8NM ,ZMR. ..... ... 2@@ ,2RZ;... .. ...... . .,;. :8M 7ZRHMMbuuub@@bUAREHMUo .288uuuu2;2AMH8RNR .,,,,,,,3bE@NNNNMNMNE7Eb8NMNN@ 2M@o,,. .:33333;ouU@NRRHN2oo7:ZE@7. .78;. ,;: * BACKGROUND Deep Freeze is software that prevents changes to the settings of Windows 95, 98, ME, 2000 and XP computers by unauthorized users. If an unauthorized change is made (software added, or files saved) the system will be restored to its original configuration the next time the computer is restarted (every 24 hours by default). There are special measures required to operate and manage a Deep Freeze - enabled computer. Users are not able to install software or change system settings without first disabling Deep Freeze. Once the new software has been installed or system settings have been changed, the computer must be re-enabled to "freeze" the new settings and protect the computer again. ** DESCRIPTION On Windows 2000/XP DeepFreeze consists of several important files: DepFrzLo.sys (kernel driver) DepFrzHi.sys (filesystem driver) dfserv.exe (service) frzstate.exe (password dialog) persis00.sys (password file and "on/off switch") The problem exists in the frzstate.exe process . If provided a long string the frzstate.exe causes an Access Violation Error which crashes the process . This was tested on Windows XP running Deep Freeze version 4.20 . Example : open the password dialog box (hold shift and double-click on the DF tray icon), after that type in a string like: '$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$' Press OK -> frzstate.exe crashes