Microsoft Windows Plug and Play Denial of Service Vulnerability

Microsoft Windows Plug and Play Denial of Service Vulnerability

Microsoft Windows Plug and Play service is prone to a denial of service condition. This issue is caused by a malformed request to the service that causes virtual memory consumption.

On Windows XP, a remote attacker must authenticate over RPC to exploit this issue using the originally described attack vector.

Update: A reliable source has indicated that this issue is anonymously exploitable via named pipes or other MSRPC calls on Microsoft Windows XP SP2. This issue may be exploited by differing attack vectors than originally described by Microsoft.