OSVDB ID: 18606

Title: Microsoft Windows Telephony Application Programming Interface (TAPI) Overflow

Info

Disclosure

Aug 09, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Windows contains a flaw related to the Telephone Application Programming Interface (TAPI) that may allow an attacker to execute arbitrary code. No further details have been provided.

Classification

Location: Local Access Required, Remote / Network Access
Attack Type: Input Manipulation, Attack Type Unknown
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Commercial
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation

Windows

2000 SP4
XP SP1
XP SP2
XP Professional x64 Edition
98
98 SE
ME

Windows Server

2003
2003 SP1
2003 for Itanium
2003 for Itanium SP1
2003 x64 Edition

References

Credit

  • Kostya Kortchinsky - CERT


Direct URL: http://osvdb.org/18606