Microsoft Windows Telephony Service Buffer Overflow Vulnerability

Microsoft Windows Telephony Service Buffer Overflow Vulnerability

Microsoft Windows Telephony Service is prone to a buffer-overflow vulnerability. This issue is due to a failure in the application to perform proper bounds checking on user-supplied data.

A successful attack can result in overflowing a finite-sized buffer, ultimately leading to arbitrary code execution in the context of the affected service. This may allow the attacker to execute arbitrary code remotely or locally to gain elevated privileges.

Remote code execution is possible only on Windows 2000 Server and Windows Server 2003; for other vulnerable platforms, the attacker must have local interactive access.