Microsoft Windows WINS Service Failed Response Vulnerability

Last Update Date: 11 May 2011 10:18 Release Date: 11 May 2011 6341 Views

RISK: High Risk

TYPE: Operating Systems - Windows OS

A remote code execution vulnerability exists in the Windows Internet Name Service (WINS) due to insufficient validations for the data structures within specially crafted WINS network packets sent to the WINS service.

Impact

Remote Code Execution

System / Technologies affected

Windows Server 2003
Windows Server 2008

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://www.microsoft.com/technet/security/bulletin/MS11-035.mspx#ERC

Vulnerability Identifier

CVE-2011-1248

Source

Microsoft
VUPEN
Secunia