Title

Microsoft Windows Remote Procedure Call (RPC) Elevation of Privilege Vulnerability (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability that affects the way Microsoft Windows handles asynchronous RPC requests. To exploit this vulnerability, an attacker would create and send a malicious RPC request to a shared host. If successfully exploited, this vulnerability would allow a remote attacker to execute arbitrary code in the context of another user.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-40034

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.