A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol connectivity (or Terminal Services) enabled.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/98550 | vdb entry third party advisory |
| https://support.microsoft.com/en-us/help/4022747/security-update-for-windows-xp-and-windows-server-2003 | patch vendor advisory |
| http://www.securityfocus.com/bid/98752 | vdb entry third party advisory |
| https://blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit | third party advisory exploit |
| https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/ | patch vendor advisory |
| https://blog.0patch.com/2017/06/a-quick-analysis-of-microsofts.html |