Title

Microsoft Windows RPC Remote Code Execution Vulnerability (MS16-061) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability affecting Microsoft Windows Remote Procedure Call (RPC). Microsoft Remote Procedure Call (RPC) is a powerful technology for creating distributed client/server programs. RPC is an interprocess communication technique that allows client and server software to communicate. To exploit this vulnerability, an attacker could submit malformed RPC requests to an affected host. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code and take control of an affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68757

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.