Overview
A vulnerabilities in Microsoft Windows' implementation of the multimedia telephony protocol H.323 could lead to the ability to remotely execute arbitrary code on the system.
Description
Microsoft Windows' implementation of the H.323 protocol contains a buffer overflow in the handling of requests. An attacker may be able to send a crafted request to the vulnerable system and exploit this vulnerability to execute arbitrary code. This vulnerability affects the following systems:
|
Impact
An attacker may be able to send a crafted request to the vulnerable system and exploit this vulnerability to execute arbitrary code. |
Solution
Apply a patch from the vendor |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
Thanks to Microsoft for reporting this vulnerability.
This document was written by Jason A Rafail.
Other Information
| CVE IDs: | CVE-2004-0117 |
| Severity Metric: | 34.26 |
| Date Public: | 2004-04-13 |
| Date First Published: | 2004-04-14 |
| Date Last Updated: | 2004-04-14 14:27 UTC |
| Document Revision: | 4 |