Microsoft Windows Print Spooler Service Vulnerability (MS05-043)

[TJ]

* Technical Description *

A vulnerability was identified in Microsoft Windows, which could be exploited by remote attackers to execute arbitrary commands or by local users to obtain elevated privileges. This flaw is due to a buffer overflow error in the Print Spooler service "Spoolsv.exe" that does not properly handle specially crafted messages, which could be exploited by remote attackers to compromise a vulnerable system.

Note : On Windows XP Service Pack 2 and Windows Server 2003, this issue would result in a denial of service condition.

 * Affected Products *

Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 1
Microsoft Windows XP Service Pack 2
Microsoft Windows Server 2003
Microsoft Windows Server 2003 for Itanium-based Systems

 * Solution *

Apply patches :
http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx

 * References *

http://www.frsirt.com/english/advisories/2005/1357
http://www.microsoft.com/technet/security/Bulletin/MS05-043.mspx