Message boxes differ in Windows Vista and in Microsoft Windows XP, although you use the same code to generate the message boxes.

For example, when you use the following code sample to generate the same message box in Windows Vista and in Windows XP, the text in the message box wraps in Windows Vista. However, the text does not wrap in Windows XP. Also, the buttons in the message box are right justified in Windows Vista. The buttons are centered in Windows XP.

#include <windows.h>
//#include <afx.h>

int WINAPI WinMain(HINSTANCE hlnstance, HINSTANCE hPrevInstance,
PSTR szcmdline, int iCmdShow)
{
MessageBox(NULL, TEXT("Hello! This is a MessageBox test! Hello! This is a MessageBox test! Hello! This is a MessageBox test!"), TEXT("MessageBox test"),MB_ICONEXCLAMATION|MB_YESNO);
return 0;
}

The Windows MessageBox exploit (also referred to as NtRaiseHardError was first released publicly on December 20, 2006. A proof-of-concept that works on Vista was released on December 31st, and verified to work by eEye Research, making it the first Vista exploit. The exploit, a vulnerability with the Client/Server Runtime Server Subsystem, allows a logged in user to have their privileges elevated to SYSTEM, and does not require user interaction (ie can be executed remotely). Microsoft is of course aware of the exploit, but no patch has yet been released. McAfee rates it as a Medium threat, as does eEye Research.