10.12.2004 - MS04-031: Vulnerability in NetDDE Could Allow Remote Code Execution (841533)

This update resolves a newly-discovered, privately reported vulnerability. A remote code execution vulnerability exists in the Network Dynamic Data Exchange (NetDDE) services because of an unchecked buffer. An attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts that have full privileges. However, the NetDDE services are not started by default and would have to be manually started, or started by an application that requires NetDDE, for an attacker to attempt to remotely exploit this vulnerability. - Download Windows NT Server SP6a Update - Download Windows NT Terminal Server SP6a Update - Download Windows 2000 SP3/SP4 Update - Download Windows XP / XP SP1 Update - Download Windows XP SP1 64-bit Update - Download Windows XP 64-bit Version 2003 Update - Download Windows Server 2003 Update - Download Windows Server 2003 64-bit Update - View Microsoft Security Bulletin MS04-031 - View Microsoft Knowledge Base Article - 841533 - Visit Microsoft Corporation