An unspecified API in Microsoft Windows 2000 Windows XP Windows Server 2003 Windows Vista Windows Server 2008 and Windows 7 does not validate arguments which allows local users to cause a denial of service (system crash) via a crafted application.