Vulnerability Note VU#650181

Microsoft Object Management DoS Vulnerability

Overview

Microsoft Object Management code has a buffer overflow vulnerability that can cause a system to reboot.

I. Description

A buffer overflow vulnerability in Microsoft Object Management code exists that could be attacked by sending specially crafted requests locally on an affected operating system version. Microsoft indicates that this vulnerability could not be exploited remotely, an attacker would have to be a locally authenticated user.

II. Impact

A locally authenticated attacker could cause an affected system to stop responding and automatically restart. Repeated exploitation of this vulnerability may result in a sustained denial of service.

III. Solution

Apply a patch

Microsoft has published Microsoft Security Bulletin MS05-018 in response to this issue. Users are strongly encouraged to review this advisory and apply the patches it refers to.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Microsoft Corporation	Vulnerable	13-Apr-2005

References

http://www.microsoft.com/technet/security/bulletin/MS05-018.mspx

Credit

Thanks to Microsoft for reporting this vulnerability.

This document was written by Robert Mead based on information provided by Microsoft.

Other Information

Date Public:	2005-04-12
Date First Published:	2005-04-13
Date Last Updated:	2005-04-13
CERT Advisory:
CVE-ID(s):	CAN-2005-0550
NVD-ID(s):	CAN-2005-0550
US-CERT Technical Alerts:
Metric:	2.43
Document Revision:	8

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader