Microsoft Windows Vista 'iphlpapi.dll' Local Kernel Buffer Overflow Vulnerability

Microsoft Windows Vista 'iphlpapi.dll' Local Kernel Buffer Overflow Vulnerability

Microsoft Windows Vista is prone to a buffer-overflow vulnerability because of insufficient boundary checks.

Local attackers could exploit this issue to cause denial-of-service conditions. Given the nature of this issue, attackers may also be able to execute arbitrary code with SYSTEM-level privileges, but this has not been confirmed.

Windows Vista SP1 is vulnerable to this issue.

UPDATE (November 25, 2008): Since this issue may be exploitable only by members of the administrative group, the security implication of this issue may be negated.