The Microsoft Device IO Control wrapped by the iphlpapi.dll API shipping with Windows Vista 32 bit and 64 bit contains a possibly exploitable, buffer overflow corrupting kernel memory. Proof of concept test code included.
9c59cd0285343f1201a99c2ae856a531dd0980b02fffd729fa5baeb8130f4c80