By Sam Varghese
November 29, 2005
A French research group has released proof-of-concept code for a
critical vulnerability in Microsofts Windows which can be exploited to
cause a denial of service.
Proof-of-concept code demonstrates a method of exploiting a
vulnerability. Though in itself not an exploit, it can help in
A patch for this flaw was released by Microsoft in October; the same
patch took care of two other unrelated vulnerabilities.
The French group FrSIRT said in its advisory that the code it had
released was aimed at a flaw in Microsoft's Distribution Transaction
The coordinator is a remote procedure call interface that provides
methods for different processes to complete transactions with each
other, often over a network.
The advisory did not say which versions of Windows would be affected
by an exploit based on this code.
When Microsoft released its advisory back in October it listed Windows
2000, Windows XP Service Pack 1, and Windows Server 2003 as being
eEye Digital Security, which discovered the problem and informed
Microsoft, rated the severity as high, allowing remote execution of
Comment has been sought from Microsoft.
Earn your Master's degree in Information Security ONLINE
Study IA management practices and the latest infosec issues.
Norwich University is an NSA Center of Excellence.