Microsoft Secure Channel Code Execution Vulnerabilities

Summary

Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via crafted packets, aka ‘Microsoft Schannel Remote Code Execution Vulnerability.’

Credit:

The information has been provided by Microsoft.


Details

Vulnerable Systems:
 * Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1

Microsoft Secure Channel could allow a remote attacker to execute arbitrary code on the system, caused by improper processing of packets by Schannel. By sending specially-crafted packets to a Windows server, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE Information:
CVE-2014-6321

Disclosure Timeline:
Original release date: 11/11/2014
Last revised: 12/02/2014

Categories: Windows