Vulnerability Note VU#257164

Microsoft DHCP Client service contains a buffer overflow

As described in RFC 2131, "The Dynamic Host Configuration Protocol (DHCP) provides a framework for passing configuration information to hosts on a TCP/IP network."

The Problem

The Microsoft DHCP Client service contains a buffer overflow. If a remote attacker responds to a DHCP request with a specially crafted DHCP response, that attacker may be able to trigger the buffer overflow on the requesting system.

For more information refer to Microsoft Security Bulletin MS06-036.

II. Impact

Microsoft addresses this vulnerability with the updates listed in Microsoft Security Bulletin MS06-036.

Systems Affected

http://www.microsoft.com/technet/security/bulletin/ms06-036.mspx
http://www.faqs.org/rfcs/rfc2131.html

Credit

This vulnerability was reported in Microsoft Security Bulletin MS06-036. Microsoft credits Mariano Nuñez Di Croce of Cybsec Security Systems for providing information regarding this vulnerability.

This document was written by Jeff Gennari.

Other Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.