Index: ntoskrnl/se/sd.c =================================================================== --- ntoskrnl/se/sd.c (revision 59067) +++ ntoskrnl/se/sd.c (working copy) @@ -1088,7 +1088,7 @@ } Acl = (PACL)((ULONG_PTR)SecurityDescriptor + SecurityDescriptor->Dacl); - if ((Acl->AclRevision < MIN_ACL_REVISION) && + if ((Acl->AclRevision < MIN_ACL_REVISION) || (Acl->AclRevision > MAX_ACL_REVISION)) { DPRINT1("Invalid DACL revision\n");