Research Archives > Upcoming Advisories > EEYEB-20030725

Date Reported:
7/25/2003 12:00:00 AM

Vendor:
Microsoft

Description:
A remotely-exploitable vulnerability that allows anonymous attackers to compromise default installations of the affected software and gain the highest possible level of access (SYSTEM).

Severity:
High

Remote Code Execution?:
Yes

Affected Software:
A large number of "installed-by-default" applications are affected, but due to the nature of this vulnerability, we are choosing not to list them all at this time.

Affected Operating Systems:
Windows NT 4.0 (all versions)
Windows 2000 SP3 and earlier
Windows XP (all versions)

Status:
Patch in progress.

Disclaimer
The information within this page may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are no warranties, implied or express, with regard to this information. In no event shall the author be liable for any direct or indirect damages whatsoever arising out of or in connection with the use or spread of this information. Any use of this information is at the user's own risk.