Microsoft Windows Buffer Overflow in Web Client Service Lets Remote Authenticated Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1014196 |
|
SecurityTracker URL: http://securitytracker.com/id/1014196
|
|
CVE Reference:
CAN-2005-1207
(Links to External Site)
|
Date: Jun 14 2005
|
Impact:
Execution of arbitrary code via network, Root access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2003, XP, XP SP1
|
Description:
A vulnerability was reported in Windows Web Client, affecting Windows 2003 and Windows XP. A remote authenticated user can execute arbitrary code with system level privileges.
A buffer overflow exists in the Web Client service. A remote authenticated user can trigger the buffer overflow to execute arbitrary code with full system privileges.
The Web Client service is disabled by default in Windows Server 2003.
Microsoft credits Mark Litchfield of Next Generation Security Software Ltd. with reporting this vulnerability.
|
Impact:
A remote authenticated user can execute arbitrary code with system level privileges.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows XP Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=91488DDD-1D7E-4277-916A-D5F2EE0B6327
Microsoft Windows XP 64-Bit Edition Service Pack 1 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=1DC37A74-BF1E-4AFE-8198-D5CA460A3872
Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium):
http://www.microsoft.com/downloads/details.aspx?FamilyId=2024382A-14A9-4231-8835-E2720C562190
Microsoft Windows Server 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B7097610-8AAB-4A2F-94C9-18D32E1C297C
Microsoft Windows Server 2003 for Itanium-based Systems:
http://www.microsoft.com/downloads/details.aspx?FamilyId=2024382A-14A9-4231-8835-E2720C562190
A restart is required.
Windows 2003 SP1 includes this fix.
Windows XP Service Pack 2 includes this fix.
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms05-028.mspx (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 14 Jun 2005 13:18:49 -0400
Subject: http://www.microsoft.com/technet/security/Bulletin/MS05-028.mspx
|
http://www.microsoft.com/technet/security/Bulletin/MS05-028.mspx
|
|
