• caglararli@hotmail.com
  • 05386281520

MS08-065 : Exploitable for remote code execution?

Çağlar Arlı      -    87 Views

MS08-065 : Exploitable for remote code execution?

Today, we released MS08-065 to fix an issue in MSMQ. You’ll notice that the bulletin was rated “Important” and indicates that remote code execution is possible. However, we would like to show you that in practice the severity of the fixed issue is limited only to information disclosure. If the MSMQ service were installed by default on any affected Windows configuration, we would have rated this one Critical.