h07 has discovered a vulnerability in Microsoft Windows, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the handling of "RpcGetPrinterData()" RPC requests within the Print Spooler service (spoolsv.exe). This can be exploited to consume almost all available memory via a specially crafted packet, which may result in a system crash.

The vulnerability is confirmed on a fully patched Windows 2000 SP4 system. Other versions may also be affected.

Solution
Restrict access to the service or disable the Print Spooler service.

Provided and/or discovered by
h07

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/2879

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers