Microsoft Windows XP Windows Management Instrumentation Denial of Service Vulnerability

Bugtraq ID:	13801
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1792
Remote:	No
Local:	Yes
Published:	May 28 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	Discovered by Juha-Matti Laurio <[email protected]>.
Vulnerable:	Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home
Not Vulnerable:

Microsoft Windows XP Windows Management Instrumentation Denial of Service Vulnerability

Microsoft Windows XP is affected by a denial of service vulnerability.

An application can trigger this issue by generating excessive expired and unused security contexts resulting a failure of RPC cache to be freed.

A successful attack can allow a local attacker to trigger a denial of service condition. A restart is required to regain normal functionality.

Microsoft has identified this issue in Windows XP Professional and Windows XP Home Edition. Other versions may be affected as well. This BID will be updated when more details are available.

Microsoft Windows XP Windows Management Instrumentation Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows XP Windows Management Instrumentation Denial of Service Vulnerability

Solution:
Microsoft has released KB article 890196 to address this issue. Users are advised to contact the vendor and visit the following location for more information about obtaining fixes:

http://support.microsoft.com/default.aspx?scid=fh;[LN];CNTACTMS

Microsoft Windows XP Windows Management Instrumentation Denial of Service Vulnerability

References:

• Knowledge Base Article - 890196 (Microsoft)
  
• Networksecurity.fi Security Advisory (28-05-2005) (Juha-Matti Laurio)