Home / bulletins

MS09-071 - Critical: Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution (974318) - Version:1.0

Posted on 08 December 2009

There is an newer version: MS09-071 - Version: 1.1

Critical

Severity Rating: Critical - Revision Note: V1.0 (December 8, 2009): Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in Microsoft Windows. These vulnerabilities could allow remote code execution if messages received by the Internet Authentication Service server are copied incorrectly into memory when handling PEAP authentication attempts. An attacker who successfully exploited either of these vulnerabilities could take complete control of an affected system. Servers using Internet Authentication Service are only affected when using PEAP with MS-CHAP v2 authentication.

Link

Other versions

• MS09-071 - Version: 1.0
• MS09-071 - Version: 1.1

 

TOP