Click Here to Install Silverlight*
United StatesChange|All Microsoft Sites
Microsoft
Download Center 
Search Advanced Search

Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028)

Brief Description
This update addresses Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028)

On This Page

Quick Details
Version:1.1
Security Bulletins:MS04-007
Knowledge Base (KB) Articles:KB811279
Date Published:2/13/2004
Language:English
Download Size:12 KB - 153
*Download size depends on selected download components.

Overview

This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028) .

A security vulnerability exists in the Microsoft ASN.1 Library that could allow code execution on an affected system. The vulnerability is caused by an unchecked buffer in the Microsoft ASN.1 Library, which could result in a buffer overflow.

An attacker who successfully exploited this buffer overflow vulnerability could execute code with system privileges on an affected system. The attacker could then take any action on the system, including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges.

Abstract Syntax Notation 1 (ASN.1) is a data standard that is used by many applications and devices in the technology industry for allowing the normalization and understanding of data across various platforms. More information about ASN.1 can be found in Microsoft Knowledge Base Article 252648.

Mitigating factors:

In the most likely exploitable scenario, an attacker would have to have direct access to the user's network.

Windows NT Embedded with Service Pack 6a

For server-class devices, download and install this patch.

For workstation-class devices, download and install this patch.

Windows NT Embedded with Service Pack 6 and Windows NT Embedded with Service Pack 5

Important Note:

The original release of Windows NT Embedded 4.0, included Windows NT Embedded with Service Pack 5. If you have made no updates to your device, this is the version of Windows NT Embedded that you have. If you are an end user of a device running either of these operating systems, you can follow the step-by-step directions described in Help Protect Windows NT Embedded-based Devices by Upgrading to Windows NT Service Pack 6a.

Product Support
If you have any issues regarding application of this patch:
YOU MAY NOT PROVIDE THIS UPDATE OR THE LOCATION (URL) OF THIS UPDATE TO ANY THIRD PARTIES.

 Top of page

System Requirements

  • Supported Operating Systems: Windows Server 2003; Windows XP; Windows XP Embedded

 Top of page

Instructions

Important: This QFE requires Repository look-up may cause incorrect files to be copied (Q811279) be installed prior to this fix.

  1. Download Q828028_XPE_SP2_x86_ENU.exe from this page.
  2. Execute Q828028_XPE_SP2_x86_ENU.exe on a machine with the Windows XP Embedded with Service Pack 1 tools installed.
This package will automatically import updated and new .sld files into the current database specified in Component Database Manager. It will also copy new binaries into the Windows XP Embedded with Service Pack 1 QFE Repository folder.

Some of the .sld files may also require importing new repository objects. The new repositories will be created on the repository root holding the main Windows XP Embedded with Service Pack 1 repository. For information on moving repositories to other locations, see Moving a Repository in your Windows Embedded Studio documentation.

Updated Components:

  • Primitive: Msasn1 - Hotfix Q828028


See Importing Components into the Database for more information.

 Top of page

Files in This Download

The links in this section correspond to separate files available in this download. Download the files most appropriate for you.
File Name:File Size

Additional_Info_Q828028.RTF

12 KB

Q828028_XPE_SP2_X86_ENU.EXE

141 KB

 Top of page

 Top of page


© 2009 Microsoft Corporation. All rights reserved. Contact Us |Terms of Use |Trademarks |Privacy Statement