A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the License Logging service when processing arguments to the "LlsrLicenseRequestW" method. This can be exploited to cause a heap-based buffer overflow by sending an RPC packet containing a string that's not NULL terminated as expected.

Successful exploitation may allow execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Cody Pierce, TippingPoint DVLabs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS09-064 (KB974783):
http://www.microsoft.com/technet/security/Bulletin/MS09-064.mspx

TippingPoint DVLabs:
http://dvlabs.tippingpoint.com/advisory/TPTI-09-07

Deep Links
Links available to Secunia VIM customers