Arbitrary Code Execution in Microsoft Windows

Reported October 12, 2004, byMicrosoft

VERSIONS AFFECTED

DESCRIPTION
Four new vulnerabilities have been discovered in various versions of Windowsthat result in the arbitrary execution of code on the vulnerable system. Thesevulnerabilities consist of

VENDOR RESPONSE
Microsoft has releasedbulletin MS04-032, "Security Update for Microsoft Windows(840987)," to address these vulnerabilities and recommends that affectedusers apply the appropriate patch listed in the bulletin.

CREDIT
Discovered by Brett Moore, eEye DigitalSecurity, Patrick Porlan, and hlt.