Secunia

Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

1) A boundary error in the Remote Access AutoDial Helper library (rasadhlp.dll) when performing hostname look-ups can be exploited to cause a stack-based buffer overflow via an overly long string.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

2) Some errors exists in the DNS Client service when processing DNS responses. This can be exploited to corrupt memory by returning a DNS response with a specially crafted "TXT", "HINFO", "X25", "ISDN", or "ATMA" record.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Peter Winter Smith, NGS Software.
2) ISS X-Force

Changelog
Further details available in Customer Area

Original Advisory
MS06-041 (KB920683):
http://www.microsoft.com/technet/security/Bulletin/MS06-041.mspx

NGSSoftware:
http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-microsoft-windows-dns-resolution/

ISS X-Force:
http://xforce.iss.net/xforce/alerts/id/233
http://xforce.iss.net/xforce/alerts/id/234
http://xforce.iss.net/xforce/alerts/id/235

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area