Windows RPC Request Processing Bug in Routing and Remote Access Service Lets Remote Users Execute Arbitrary Code on the Target System
|
SecurityTracker Alert ID: 1038701 |
SecurityTracker URL: http://securitytracker.com/id/1038701
|
CVE Reference:
CVE-2017-8461
(Links to External Site)
|
Date: Jun 15 2017
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): XP, 2003, 2003 R2
|
Description:
A vulnerability was reported in Windows RPC. A remote user can execute arbitrary code on the target system.
A remote user can send specially crafted RPC data to execute arbitrary code on the target system.
Systems with Routing and Remote Access are affected.
|
Impact:
A remote user can execute arbitrary code on the target system.
|
Solution:
The vendor has issued a fix.
The vendor advisory is available at:
https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003
|
Vendor URL: support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003 (Links to External Site)
|
Cause:
Not specified
|
|
Message History:
None.
|
Source Message Contents
|
|
[Original Message Not Available for Viewing]
|
|