----------------------------------------------------------------------

Want a new job?

https://secunia.com/secunia_security_specialist/
https://secunia.com/hardcore_disassembler_and_reverse_engineer/

International Partner Manager - Project Sales in the IT-Security
Industry:
https://corporate.secunia.com/about_secunia/64/

----------------------------------------------------------------------

TITLE:
Microsoft Windows Bluetooth SDP Packet Processing Vulnerability

SECUNIA ADVISORY ID:
SA30051

VERIFY ADVISORY:
https://secunia.com/advisories/30051/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
>From remote

OPERATING SYSTEM:
Microsoft Windows Vista
https://secunia.com/product/13223/
Microsoft Windows XP Home Edition
https://secunia.com/product/16/
Microsoft Windows XP Professional
https://secunia.com/product/22/

DESCRIPTION:
A vulnerability has been reported in Microsoft Windows, which can be
exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the Bluetooth stack
when processing service description requests. This can be exploited
by rapidly sending a large number of specially crafted SDP (Service
Discovery Protocol) packets to a vulnerable system.

Successful exploitation may allow execution of arbitrary code, but
requires that Bluetooth is enabled.

SOLUTION:
Apply patches.

Windows XP SP2 / SP3:
https://www.microsoft.com/downloads/details.aspx?familyid=980bb421-950f-4825-8039-44cc961a47b8

Windows XP Professional x64 Edition (optionally with SP2):
https://www.microsoft.com/downloads/details.aspx?familyid=81ab56ca-933f-4974-a393-290a54c30a78

Windows Vista (optionally with SP1):
https://www.microsoft.com/downloads/details.aspx?familyid=6524debe-be50-44d1-8543-af0bfaf086ad

Windows Vista x64 Edition (optionally with SP1):
https://www.microsoft.com/downloads/details.aspx?familyid=6adee8b9-3455-4f3b-8bdd-2585c8ff83b8

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
MS08-030 (KB951376):
https://www.microsoft.com/technet/security/Bulletin/MS08-030.mspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
https://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
https://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------