Microsoft Windows is prone to an overflow condition. The Active Directory implementation fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted query, a remote attacker can potentially execute arbitrary code.

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability. Check the vendor advisory or solution in the references section.

• OVAL ID: 14037
• CVE ID: 2011-3406 (see also: NVD)
• Microsoft Knowledge Base Article: 2621146 2626416 2640045
• Secunia Advisory ID: 47202
• Bugtraq ID: 50959
• Vendor Specific Advisory URL: http://technet.microsoft.com/en-us/security/bulletin/ms11-095
• News Article: http://www.computerworld.com/s/article/9222530/Update_Microsoft_plans_20_patches_next_week_will_fix_Duqu_and_BEAST_bugs
  http://www.computerworld.com/s/article/9222639/Microsoft_scratches_BEAST_patch_at_last_minute_but_fixes_Duqu_bug

• Not Available