Microsoft Windows LRPC Client Buffer Overrun Vulnerability

An elevation of privilege vulnerability exists in Microsoft Local Remote Procedure Call (LRPC) where an attacker spoofs an LRPC Server and uses a specially crafted LPC port message to cause a stack-based buffer overflow condition on the LRPC client. LRPC internally uses Microsoft Local Procedure Call (LPC). So, in effect, any LPC consumer might be impacted by this vulnerability, if not properly implemented. An attacker who successfully exploited this vulnerability could then install programs; view, change, or delete data; or create new accounts with full administrator rights.