Web Services on Devices Application Programming Interface API memory corruption

[EN] securityvulns.ru
no-pyccku

Web Services on Devices Application Programming Interface API memory corruption
Published: 11.11.2009
Source: MICROSOFT
SecurityVulns ID: 10390
Type: library
Level: 8/10
Description: Memory corruption on WSD (TCP/5357, TCP/5358, UDP/3702) network packet parsing.

Affected: MICROSOFT : Windows Vista
MICROSOFT : Windows 2008 Server
CVE: CVE-2009-2512 (The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response, aka "Web Services on Devices API Memory Corruption Vulnerability.")

Original document MICROSOFT, Microsoft Security Bulletin MS09-063 - Critical Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565) (11.11.2009)

Files: Microsoft Security Bulletin MS09-063 - Critical Vulnerability in Web Services on Devices API Could Allow Remote Code Execution (973565)
Discuss: Read or add your comments to this news (0 comments)