• info
• discussion
• exploit
• solution
• references

Microsoft Win32 API Parameter Validation Remote Code Execution Vulnerability

Solution:
Microsoft has released security advisory MS07-035 to address this issue in supported versions of affected applications. Please see the referenced advisory for more information.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB935839)
  Microsoft Windows Server 2003 x64 Edition update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f5e45e3c-4cac -41a5-99f7-42c2c2c73e99&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB935839)
  Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=27c7f1b9-2d1d -40cb-ad7e-bfedb6156a9c&displaylang=en

Microsoft Windows Server 2003 Itanium SP1

• Cuyahoga Security Update for Windows Server 2003 for Itanium-based Systems (KB935839) - English
  Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems update (KB935839) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=170473d8-6bb1 -4fbd-8494-a059dbfdf182&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows Server 2003 Itanium 0

• Cuyahoga Security Update for Windows Server 2003 for Itanium-based Systems (KB935839) - English
  Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems update (KB935839) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=170473d8-6bb1 -4fbd-8494-a059dbfdf182&displaylang=en

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB935839)
  Microsoft Windows 2000 Service Pack 4 Update for (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3918ac76-ebb6 -4886-9a9e-808eafb96b1b&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Cuyahoga Security Update for Windows Server 2003 for Itanium-based Systems (KB935839) - English
  Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems update (KB935839) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=170473d8-6bb1 -4fbd-8494-a059dbfdf182&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB935839)
  Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=27c7f1b9-2d1d -40cb-ad7e-bfedb6156a9c&displaylang=en

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB935839)
  Microsoft Windows 2000 Service Pack 4 Update for (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3918ac76-ebb6 -4886-9a9e-808eafb96b1b&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB935839)
  Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=27c7f1b9-2d1d -40cb-ad7e-bfedb6156a9c&displaylang=en

Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows XP x64 Edition (KB935839)
  Microsoft Windows XP Professional x64 Edition update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0ba12191-1e6f -443b-9150-7ab8b2deb7c2&displaylang=en

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Cuyahoga Security Update for Windows Server 2003 for Itanium-based Systems (KB935839) - English
  Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems update (KB935839) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=170473d8-6bb1 -4fbd-8494-a059dbfdf182&displaylang=en

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB935839)
  Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d554dff4-bcfb -4bbc-8fa0-af2f939d2610&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1

• Cuyahoga Security Update for Windows Server 2003 for Itanium-based Systems (KB935839) - English
  Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems update (KB935839) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=170473d8-6bb1 -4fbd-8494-a059dbfdf182&displaylang=en

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Windows XP (KB935839)
  Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=27c7f1b9-2d1d -40cb-ad7e-bfedb6156a9c&displaylang=en

Microsoft Windows Server 2003 Standard x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB935839)
  Microsoft Windows Server 2003 x64 Edition update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f5e45e3c-4cac -41a5-99f7-42c2c2c73e99&displaylang=en

Microsoft Windows 2000 Server SP4

• Microsoft Security Update for Windows 2000 (KB935839)
  Microsoft Windows 2000 Service Pack 4 Update for (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3918ac76-ebb6 -4886-9a9e-808eafb96b1b&displaylang=en

Microsoft Windows 2000 Professional SP4

• Microsoft Security Update for Windows 2000 (KB935839)
  Microsoft Windows 2000 Service Pack 4 Update for (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3918ac76-ebb6 -4886-9a9e-808eafb96b1b&displaylang=en

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB935839)
  Microsoft Windows Server 2003 x64 Edition update (KB935839)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=f5e45e3c-4cac -41a5-99f7-42c2c2c73e99&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Cuyahoga Security Update for Windows Server 2003 for Itanium-based Systems (KB935839) - English
  Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems update (KB935839) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=170473d8-6bb1 -4fbd-8494-a059dbfdf182&displaylang=en