Microsoft PGM Remote Buffer Overflow Vulnerability

Bugtraq ID:	19922
Class:	Boundary Condition Error
CVE:	CVE-2006-3442
Remote:	Yes
Local:	No
Published:	Sep 12 2006 12:00AM
Updated:	Sep 22 2006 05:21PM
Credit:	David Warden reported this issue to the vendor.
Vulnerable:	Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 HP Storage Management Appliance 2.1 + HP Storage Management Appliance III + HP Storage Management Appliance II + HP Storage Management Appliance I
Not Vulnerable:

Microsoft PGM Remote Buffer Overflow Vulnerability

Microsoft Pragmatic General Multicast (PGM) is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds-check externally supplied data.

An attacker can exploit this issue to execute arbitrary code, facilitating a complete system compromise.

This issue affects systems only when Microsoft Message Queuing (MSMQ) 3.0 is installed; this is not the default.

Microsoft PGM Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Microsoft PGM Remote Buffer Overflow Vulnerability

Solution:
Microsoft has released a security bulletin to address this issue. Please refer to the attached security bulletin for more information.


Microsoft Windows XP Media Center Edition SP1

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Home

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Home SP1

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Media Center Edition

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Tablet PC Edition SP1

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Professional

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Professional SP1

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Tablet PC Edition

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft Windows XP 0

• Microsoft Security Update for Windows XP (KB919007)
  http://www.microsoft.com/downloads/details.aspx?familyid=ce264ac4-6ca3 -4732-9016-3143ff1bca2f&displaylang=en

Microsoft PGM Remote Buffer Overflow Vulnerability

References:

• Microsoft Security Bulletin MS06-052 (Microsoft)
  
• Microsoft Technet Security (Microsoft)
  
• [security bulletin] HPSBST02134 SSRT061187 rev.1 - Storage Management Appliance ([email protected])