An information disclosure issue exists due to improper validation of function parameters in Windows kernel-mode drivers. This allows an attacker to access data from any kernel-mode memory location, including access to the SAM file. A local user can exploit this by running a crafted application that triggers a NULL pointer dereference.