10.15.2003 - MS03-043: Buffer Overrun in Messenger Service Could Allow Code Execution (828035)

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. The vulnerability results because the Messenger Service does not properly validate the length of a message before passing it to the allocated buffer. An attacker who successfully exploited this vulnerability could be able to run code with Local System privileges on an affected system, or could cause the Messenger Service to fail. The attacker could then take any action on the system, including installing programs, viewing, changing or deleting data, or creating new accounts with full privileges. - Download Windows NT Workstation 4.0 SP6a Patch - Download Windows NT Server 4.0 SP6a Patch - Download Windows NT Server 4.0,Terminal Server Edition SP6 Patch - Download Windows 2000 SP2 Patch - Download Windows 2000 SP3 & SP4 Patch - Download Windows XP SP1 Patch - Download Windows XP 64-Bit Edition Patch - Download Windows XP 64-Bit Edition Version 2003 Patch - Download Windows Server 2003 Patch - Download Windows Server 2003 64 bit Edition Patch - View Microsoft Knowledge Base Article - 828035 - View Microsoft Security Bulletin - View Microsoft End User Security Bulletin - Visit Microsoft Corporation