Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability

The Microsoft Message Queuing service (MSMQ) is prone to a remote heap-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, facilitating the complete compromise of an affected computer. Failed exploit attempts will result in a denial-of-service condition.

This issue is exploitable remotely on Windows 2000 systems only. The MSMQ service is not installed or enabled by default. For a computer to be exploited, an administrator must have explicitly installed and enabled the service.







 

Privacy Statement
Copyright 2008, SecurityFocus