Secunia

eEye Digital Security has reported a vulnerability in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the Workstation Service (wkssvc.dll) within the "NetpManageIPCConnect()" function. This can be exploited to cause a buffer overflow via a specially crafted message sent to the system.

This can e.g. be exploited via a NetrJoinDomain2 RPC call with an overly long MachineName in the second argument.

Successful exploitation allows execution of arbitrary code, but requires Administrator privileges on Windows XP SP2.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
JeongWook Matt Oh, eEye Digital Security.

Changelog
Further details available in Customer Area

Original Advisory
MS06-070 (KB924270):
http://www.microsoft.com/technet/security/Bulletin/MS06-070.mspx

eEye Digital Security:
http://research.eeye.com/html/advisories/published/AD20061114.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area