Microsoft KB Archive/926043

Knowledge Base

Microsoft Security Advisory: Vulnerability in the Windows Shell could allow remote code execution

Article ID: 926043

Article Last Modified on 10/11/2007

---

APPLIES TO

• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Professional Edition
• Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
• Microsoft Windows Server 2003, Enterprise Edition
• Microsoft Windows Server 2003, Standard Edition (32-bit x86)
• Microsoft Windows Server 2003, 64-Bit Datacenter Edition
• Microsoft Windows Server 2003, 64-Bit Enterprise Edition
• Microsoft Windows XP Professional for Itanium-based systems
• Microsoft Windows XP Professional for Itanium-based systems
• Microsoft Windows XP Professional
• Microsoft Windows XP Home Edition
• Microsoft Windows XP Tablet PC Edition
• Microsoft Windows XP Media Center Edition 2002
• Microsoft Windows Server 2003, Web Edition
• Microsoft Windows Server 2003, Standard x64 Edition
• Microsoft Windows Server 2003, Enterprise x64 Edition
• Microsoft Windows Server 2003, Datacenter x64 Edition
• Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
• Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
• Microsoft Windows Server 2003 SP1, when used with:
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
• Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
• Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)
• Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86)
• Microsoft Windows Server 2003 R2 Standard x64 Edition
• Microsoft Windows Server 2003 R2 Enterprise x64 Edition
• Microsoft Windows Server 2003 R2 Datacenter x64 Edition
• Microsoft Windows XP Service Pack 1, when used with:
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Media Center Edition 2002
  • Microsoft Windows XP Tablet PC Edition
• Microsoft Windows XP Tablet PC Edition 2005
• Microsoft Windows XP Media Center Edition 2005
• Microsoft Windows XP Service Pack 2, when used with:
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows 2000 Service Pack 4

---

Microsoft is investigating new public reports of vulnerability in supported versions of Microsoft Windows.

Microsoft has released a security advisory about this issue for IT professionals. This security advisory also contains additional security-related information. To view this security advisory, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/advisory/926043.mspx

Additional query words: security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service

Keywords: kbtshoot kbbug kbfix kbsecvulnerability kbsecurity kbpubtypekc kbsecadvisory KB926043

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.