Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028)Brief DescriptionThis update addresses Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028) On This PageQuick Details
OverviewThis is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028)
. A security vulnerability exists in the Microsoft ASN.1 Library that could allow code execution on an affected system. The vulnerability is caused by an unchecked buffer in the Microsoft ASN.1 Library, which could result in a buffer overflow. An attacker who successfully exploited this buffer overflow vulnerability could execute code with system privileges on an affected system. The attacker could then take any action on the system, including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges. Abstract Syntax Notation 1 (ASN.1) is a data standard that is used by many applications and devices in the technology industry for allowing the normalization and understanding of data across various platforms. More information about ASN.1 can be found in Microsoft Knowledge Base Article 252648. Mitigating factors: In the most likely exploitable scenario, an attacker would have to have direct access to the user's network. Windows NT Embedded with Service Pack 6a For server-class devices, download and install this patch. For workstation-class devices, download and install this patch. Windows NT Embedded with Service Pack 6 and Windows NT Embedded with Service Pack 5 Important Note: The original release of Windows NT Embedded 4.0, included Windows NT Embedded with Service Pack 5. If you have made no updates to your device, this is the version of Windows NT Embedded that you have. If you are an end user of a device running either of these operating systems, you can follow the step-by-step directions described in Help Protect Windows NT Embedded-based Devices by Upgrading to Windows NT Service Pack 6a. Product Support If you have any issues regarding application of this patch:
YOU MAY NOT PROVIDE THIS UPDATE OR THE LOCATION (URL) OF THIS UPDATE TO ANY THIRD PARTIES. System Requirements
InstructionsImportant: This QFE requires Repository look-up may cause incorrect files to be copied (Q811279) be installed prior to this fix.
Some of the .sld files may also require importing new repository objects. The new repositories will be created on the repository root holding the main Windows XP Embedded with Service Pack 1 repository. For information on moving repositories to other locations, see Moving a Repository in your Windows Embedded Studio documentation. Updated Components:
See Importing Components into the Database for more information. Files in This DownloadThe links in this section correspond to separate files available in this download. Download the files most appropriate for you.
|
|||||||||||||||||||||||