A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a double free error in the Windows Workstation Service processing arguments passed to the "NetrGetJoinInformation()" function. This can be exploited to trigger a memory corruption via a specially crafted RPC request sent to an affected system.

Successful exploitation may allow execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Cody Pierce, TippingPoint DVLabs

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS09-041 (KB971657):
http://www.microsoft.com/technet/security/Bulletin/MS09-041.mspx

TippingPoint:
http://dvlabs.tippingpoint.com/advisory/TPTI-09-06

Deep Links
Links available to Secunia VIM customers