|MS10-097||Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remote Code Execution (2443105)||Windows XP||Critical||15-12-2010|
Brief overview of the risk:
This security update resolves a publicly disclosed vulnerability in the Internet Connection Signup Wizard of Microsoft Windows. This security update is rated Important for all supported editions of Windows XP and Windows Server 2003.
Detailed Information on the risk:
A remote code execution vulnerability exists in the way that the Internet Connection Signup Wizard, a component of Microsoft Windows, handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
Further information on this exploit is available at : MS10-097
Affected SoftwareWindows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems