A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the WebDAV Mini-Redirector a.k.a Web Client service (mrxdav.sys) when handling long pathnames in WebDAV responses. This can be exploited to cause a heap-based buffer overflow via a specially crafted WebDAV response.

Successful exploitation allows execution of arbitrary code when e.g. visiting a malicious website.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Steven, COSEINC Vulnerability Research Lab.

Changelog
Further details available in Customer Area

Original Advisory
MS08-007 (KB946026):
http://www.microsoft.com/technet/security/Bulletin/MS08-007.mspx

COSEINC Vulnerability Research Lab:
http://www.coseinc.com/coseinc_windows_advisory_3.pdf

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area