Cybsec Security Systems has reported a vulnerability in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the DHCP Client service (dhcpcsvc.dll) when processing DHCP responses. This can be exploited to cause a stack-based buffer overflow by sending a specially crafted DHCP response to the client.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Mariano Nuñez Di Croce, Cybsec Security Systems.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS06-036 (KB914388):
http://www.microsoft.com/technet/security/Bulletin/MS06-036.mspx

Cybsec:
http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_Microsoft_Windows_DHCP_Client_Service_Remote_Buffer_Overflow.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers