Description
A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a remote attacker to execute arbitrary code on the target computer, provided that the computer is joined in a Windows domain and has Remote Desktop Protocol connectivity (or Terminal Services) enabled.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3
Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3affected
References
- http://www.securityfocus.com/bid/98550 ↗
- https://support.microsoft.com/en-us/help/4022747/security-update-for-windows-xp-and-windows-server-2003 ↗
- http://www.securityfocus.com/bid/98752 ↗
- https://blog.fortinet.com/2017/05/11/deep-analysis-of-esteemaudit ↗
- https://blogs.technet.microsoft.com/msrc/2017/04/14/protecting-customers-and-evaluating-risk/ ↗
- https://blog.0patch.com/2017/06/a-quick-analysis-of-microsofts.html ↗