Microsoft Security Bulletin MS03-043[15-11-03]

NICK ADSL UK · Nov 15, 2003

Microsoft Security Bulletin MS03-043[15-11-03]

--------------------------------------------------------------------------------

Buffer Overrun in Messenger Service Could Allow Code Execution (828035)
Issued: October 15, 2003
Updated: November 14, 2003
Version Number: 2.2
Who Should Read This Document: Customers using Microsoft® Windows®
FOR FURTHER INFO AND DOWNLOAD
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-043.asp
YOU CAN ALSO DOWNLOAD FROM THE WINDOWS UPDATE SITE
http://v4.windowsupdate.microsoft.com/en/default.asp

snakefoot · Nov 15, 2003

Amazing it is the second time they are fixing this update.

V2.2 November 14, 2003: Subsequent to the release of this bulletin, it was determined that the update for Windows XP did not properly place the updated file wkssvc.dll into the %systemroot%\system32\dllcache. This problem is unrelated to the security vulnerability discussed in this bulletin. Microsoft recommends that customers who have previously applied the security update reinstall the latest version to insure that their system remains protected in the event that the wkssvc.dll is ever deleted or becomes corrupt. More information on this is available in the FAQ section of this bulletin. Caveats section has been updated to include new information relevant to NT 4.0 clients.
Click to expand...

Adrynalyne · Nov 15, 2003

Installed

If its one thing I've learned from MS, everything is best done twice(or more)!

Wisewiz · Nov 15, 2003

Thanks for yet another heads-up, Nick! I had neglected the old WU page for several weeks, but hopped right over as soon as I saw your post, and the scanner told me I needed that update.

I will not, will not, will not let MS run its autoupdate phone-home program on my machines, but that just means I've gotta be more careful about checking WU once a week or so.

Vlad902 · Nov 15, 2003

Yeah there's also 51 and 49 (Remote root on both), if you're running NTFS supposedly it's not gonna root you on a default install (It'll not work because it's exploitng a buffer overflow in a vsprintf() call to a debug log and on NTFS on 2k and XP the file is not writeable (I think), so it'll just not work...), still good to patch though.

How is it living with a remote root hole a week you guys?

Log in or Sign up

Microsoft Security Bulletin MS03-043[15-11-03]

NICK ADSL UK MajorGeeks Forum Administrator Staff Member

snakefoot Sergeant Major

Adrynalyne Guest

Wisewiz Apprentice's Sorcerer

Vlad902 Guest