Home / bulletins

MS09-049 - Critical: Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710) - Version:1.1

Posted on 10 September 2009

Critical

Severity Rating: Critical - Revision Note: V1.1 (September 9, 2009): Revised the description for Wireless Frame Parsing Remote Code Execution Vulnerability (CVE-2009-1132) to clarify exploit conditions.Summary: This security update resolves a privately reported vulnerability in Wireless LAN AutoConfig Service. The vulnerability could allow remote code execution if a client or server with a wireless network interface enabled receives specially crafted wireless frames. Systems without a wireless card enabled are not at risk from this vulnerability.

Link

Other versions

• MS09-049 - Version: 1.0
• MS09-049 - Version: 1.1

 

TOP