Microsoft Windows Bluetooth Stack Memory Access Error Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1025760 |
|
SecurityTracker URL: http://securitytracker.com/id/1025760
|
|
CVE Reference:
CVE-2011-1265
(Links to External Site)
|
Date: Jul 12 2011
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): Vista SP2, 7 SP1; and prior service packs
|
Description:
A vulnerability was reported in the Microsoft Windows Bluetooth Stack. A remote user can execute arbitrary code on the target system.
A remote user within Bluetooth radio proximity can send specially crafted Bluetooth packets to trigger a memory access error and execute arbitrary code on the target system. The code will run with the privileges of the target service.
Only systems with Bluetooth capability are affected.
Windows Bluetooth 2.1 Stack is affected.
|
Impact:
A remote user can execute arbitrary code on the target system.
|
Solution:
The vendor has issued the following fixes:
Windows Vista Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=6BFF74AC-45F3-4585-92DA-316921B458FA
Windows Vista Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=A1E5AA7D-5F38-4CE2-9575-4B4CB7520160
Windows Vista x64 Edition Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=849D2694-C8B3-4670-8203-912661BCCABF
Windows Vista x64 Edition Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=4287EEB4-AB29-4727-83F2-260D838B44D4
Windows 7 for 32-bit Systems and Windows 7 for 32-bit Systems Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=7F811B75-C3FF-411A-AAA9-126DCE34CC01
Windows 7 for x64-based Systems and Windows 7 for x64-based Systems Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=90B2DA71-18F9-46EE-9E3D-B08620CA06AA
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms11-053.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms11-053.mspx (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
