Full write up discussing the Mailslot bug discussed in MS06-035 and another bug discovered alongside of it.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49307/mailslot.txt
Source: https://packetstormsecurity.com/files/49307/mailslot.txt.html