Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to expose sensitive information and compromise a vulnerable system.

1) A boundary error in the Server service (SRV.SYS) when handling first-class Mailslot messages can be exploited to corrupt memory by sending a specially crafted packet to the service.

Successful exploitation allows execution of arbitrary code.

2) An uninitialised buffer in the Server protocol driver can be exploited to view data from the Server Message Block buffers by sending specially crafted packets to the service.

Solution
Apply patches:
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Pedram Amini, TippingPoint Security Research Team working with HD Moore.
2) Mike Price and Rafal Wojtczuk of McAfee Avert Labs (the vendor alsocredits Nicolas Pouvesle, Tenable Network Security).

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS06-035 (KB917159):
http://www.microsoft.com/technet/security/Bulletin/MS06-035.mspx

TippingPoint:
http://www.tippingpoint.com/security/advisories/TSRT-06-02.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers