iDEFENSE Security Advisory 04.12.05 (b) - CSRSS.EXE (the core executable for the Windows Client/Server Runtime Server Subsystem, the process which manages most graphical commands in Windows) is vulnerable to a local stack-based buffer overflow.
1ed152806cb81fcfa39c72026fa271e195f5ccb4b3cf94eaa8a73449efe485a7