A vulnerability has been identified in some versions of Windows, which can be exploited by malicious users to cause a DoS (Denial of Service) on a vulnerable system and potentially compromise it.

The vulnerability is caused due to a boundary error when validating parameters of a SMB packet. When a client sends a SMB packet to a server, it includes various parameters. On of these parameters is a size parameter, which the server doesn't check in any way. This can be exploited to cause a buffer overflow by sending a specially crafted SMB packet containing a size parameter, which is too small.

This will result in arbitrary data being overwritten leading to data corruption, a crash, or execution of arbitrary code. However, successful exploitation requires that a user has been authenticated by the SMB service.

Solution
Apply Service Pack 4 or the patch via WindowsUpdate or manually.
Further details available in Customer Area

Provided and/or discovered by
Jeremy Allison and Andrew Tridgell (Samba Team).

Changelog
Further details available in Customer Area

Original Advisory
http://www.microsoft.com/technet/security/bulletin/MS03-024.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area