• info
• discussion
• exploit
• solution
• references

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Authenticode Signature Verification 5.1

• Microsoft Security Update for Windows 2000 (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=D7538166-35EE -4C6B-BE8C-E83A1FC6CD77


• Microsoft Security Update for Windows Server 2003 (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=0E7E3DEB-F078 -4953-9642-675EC69267F2


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=06832599-1E9B -4792-8C7B-7B5B3A3D6277


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=99A3F6DA-728F -421C-AB41-C4C4751934A4


• Microsoft Security Update for Windows XP (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=2A01DDF0-F3EA -47C8-ADA2-E69F6C1B5F96


• Microsoft Security Update for Windows XP x64 Edition (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=9BBFF00C-F8F4 -4A44-98F2-18A868986AE1

Microsoft Authenticode Signature Verification 6.1

• Microsoft Security Update for Windows 7 (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=8D4A6C65-E171 -4570-8F3F-118F06910BAF


• Microsoft Security Update for Windows 7 for x64-based Systems (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=CF8C6721-05C2 -4680-93B4-BE36F09C6D15


• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=40F622D2-48E7 -4EB2-9430-BBD218CB5208


• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=94DFDAAE-8464 -4DE6-A401-7EB70B3BB34F

Microsoft Authenticode Signature Verification 6.0

• Microsoft Security Update for Windows Server 2008 (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=97FFEEC8-8B6D -4A30-97B0-4BFF2BA5E91D


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=BD60779A-8BB1 -4107-A344-9B09A50E96FF


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=49F9F740-023A -4291-BECF-838A1D282321


• Microsoft Security Update for Windows Vista (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=A52225A7-6005 -4F2B-8291-DB20558F23F8


• Microsoft Security Update for Windows Vista for x64-based Systems (KB978601)
  http://www.microsoft.com/downloads/details.aspx?familyid=9BA7468C-23A4 -4994-9A5A-22E96EF586F3