The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4 XP SP2 and SP3 Server 2003 SP2 Vista SP1 and SP2 Server 2008 Gold and SP2 Windows 7 and Server 2008 R2 \do not properly validate all callback parameters when creating a new window \ which allows local users to execute arbitrary code aka \Win32k Window Creation Vulnerability.\