Windows crash when navigate '\\.\globalroot\device\condrv\kernelconnect' on edge/chrome/firefox

轩 龙 6 Reputation points
2021-01-19T08:01:37.747+00:00

58036-wecom-screenshot-20210119160442.png
58093-wecom-screenshot-20210119160241.png
GetFileAttributesExW -> CdpDispatchCleanup 

   #include <iostream>  
   #include <Windows.h>  
      
   int main()  
   {  
       WCHAR fileName[] = L"\\\\.\\globalroot\\device\\condrv\\kernelconnect";  
       WIN32_FILE_ATTRIBUTE_DATA data;  
       GetFileAttributesEx(fileName, GetFileExInfoStandard, &data);  
   }
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,574 questions
0 comments

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. UT3 CTF 6 Reputation points
    2021-01-20T16:50:13.91+00:00

    A random user's morning:

    • ah, what a good morning! let's make a cup of coffee, open a browser and go to, let's say, \.\globalroot\device\condrv\kernelconnect, because I'm just curious what's going to happen since I never tried this before.
    1 person found this answer helpful.
  2. Carl Fan 241 Reputation points
    2021-01-20T10:14:06.16+00:00

    Hi，
    It seems a known issue now. Please check the information in the link below.
    https://www.bleepingcomputer.com/news/security/windows-10-bug-crashes-your-pc-when-you-access-this-location/
    If the user tries to access the destination on his PC with the browser. The system may get crash.
    MS is aware of that.
    Hope this helps and please help to accept as Answer if the response is useful.
    Best Regards,
    Carl

    0 comments
  3. Rohit Bhattacharya 1 Reputation point
    2021-05-29T13:45:24.823+00:00

    please do not try that on a real machine coz if you do so then the computer will get BSOD and it will be unbootable

  4. Rohit Bhattacharya 1 Reputation point
    2021-05-29T13:46:34.957+00:00

    but you can try it on a vm if you want to

  5. 12X 1 Reputation point
    2022-03-01T08:47:35.957+00:00

    Its patched now by microsoft

    0 comments