10.30.2003 - MS03-043: Buffer Overrun in Messenger Service Could Allow Code Execution (828035) Re-released

A security vulnerability exists in the Messenger Service that could allow arbitrary code execution on an affected system. The vulnerability results because the Messenger Service does not properly validate the length of a message before passing it to the allocated buffer. Note A revised version of the security patch for Windows 2000 has been released to correct the issue documented by Knowledge Base Article 830846 - Download Windows NT Workstation 4.0 SP6a Patch - Download Windows NT Server 4.0 SP6a Patch - Download Windows NT Server 4.0,Terminal Server Edition SP6 Patch - Download Windows 2000 SP2 Patch - Download Windows 2000 SP3 & SP4 Patch - Download Windows XP SP1 Patch - Download Windows XP 64-Bit Edition Patch - Download Windows XP 64-Bit Edition Version 2003 Patch - Download Windows Server 2003 Patch - Download Windows Server 2003 64 bit Edition Patch - View Microsoft Knowledge Base Article - 828035 - View Microsoft Knowledge Base Article - 830846 - View Microsoft Security Bulletin - View Microsoft End User Security Bulletin - Visit Microsoft Corporation