Windows

Windows XP Security Patch: Unchecked Buffer in UPnP Can Lead to System Compromise

Share
Select Language:
This update resolves the “Unchecked Buffer in Universal Plug and Play Can Lead to System Compromise” security vulnerability in Windows XP. Download now to prevent a malicious user from compromising your computer, or using it to interfere with another computer's operation.
  • Details

    Version:
    Date Published:

    1

    12/19/2001

    File name:
    File size:

    Q315000_WXP_SP1_x86_ENU.exe

    586 KB

    KB Articles: KB315000
    Security bulletins: MS01-054
      This update resolves the “Unchecked Buffer in Universal Plug and Play Can Lead to System Compromise” security vulnerability in Windows XP. Download now to prevent a malicious user from compromising your computer, or using it to interfere with another computer's operation. The vulnerability results because the Windows XP Universal Plug and Play feature does not correctly validate inputs before using them. The patch also eliminates the vulnerability discussed in Microsoft Security Bulletin MS01-059.
  • System Requirements

    Supported Operating System

    Windows XP

      • Windows XP Professional
      • Windows XP Home Edition
  • Install Instructions

      1. Click the Download button on this page to start the download, or choose a different language from the drop-down list and click Go.
      2. Do one of the following:
        • To start the installation immediately, click Open or Run this program from its current location.
        • To copy the download to your computer for installation at a later time, click Save or Save this program to disk.
  • Additional Information

      Who should read this bulletin: Customers using Microsoft Windows XP Professional or Home Edition, or who have installed the Windows XP Internet Connection Sharing client on Windows 98 or 98SE.

      Impact of vulnerability: Run code of attacker’s choice.

      Maximum Severity Rating: Critical

      Recommendation: Microsoft strongly urges all Windows XP customers to apply the patch immediately. Customers using Windows 98, 98SE or ME should apply the patch if Universal Plug and Play support is installed and running.

      Affected Software:
      • Microsoft Windows 98
      • Microsoft Windows 98SE
      • Microsoft Windows Me
      • Microsoft Windows XP
  • Related Resources

Popular downloads

Free PC updates

  • Security patches
  • Software updates
  • Service packs
  • Hardware drivers
Run Microsoft Update
close
moreinfo