07.197.2003 - MS03-026: Buffer Overrun In RPC Interface Could Allow Code Execution (823980)

There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. This particular vulnerability affects a Distributed Component Object Model (DCOM) interface with RPC, which listens on TCP/IP port 135. This interface handles DCOM object activation requests that are sent by client machines (such as Universal Naming Convention (UNC) paths) to the server. An attacker who successfully exploited this vulnerability would be able to run code with Local System privileges on an affected system. The attacker would be able to take any action on the system, including installing programs, viewing changing or deleting data, or creating new accounts with full privileges. - Download Windows NT 4.0 Server Patch - Download Windows NT 4.0 Terminal Server Edition Patch - Download Windows 2000 Patch - Download Windows XP 32 bit Edition Patch - Download Windows XP 64 bit Edition Patch - Download Windows Server 2003 32 bit Edition Patch - Download Windows Server 2003 64 bit Edition Patch - View Knowledge Base Article 823980 - View Microsoft Security Bulletin MS03-026 - View Microsoft End User Security Bulletin - Visit Microsoft Corporation