Family: Windows : Microsoft Bulletins --> Category: infos
Unchecked Buffer in ntdll.dll (Q815021) Vulnerability Scan
Vulnerability Scan Summary
Checks for MS Hotfix Q815021
Detailed Explanation for this Vulnerability Test
Arbitrary code can be executed on the remote host.
The remote version of Windows contains a buffer overflow in the Windows
kernel which may allow a possible hacker to execute arbitrary code on the remote
host with the SYSTEM rights.
For example this vulnerability can be exploited through the WebDAV component
of IIS 5.0.
A public code is available to exploit this flaw.
Microsoft has released a set of patches for Windows NT, 2000 and XP :
Critical / CVSS Base Score : 10
Click HERE for more information and discussions on this network vulnerability scan.