Microsoft Windows Telnet Service Buffer Overflow Vulnerability (CVE-2015-0014) Security Update

Vulnerability Key Information Executive Summary Vulnerability Description: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends specially crafted packets to an affected Windows server. Severity Level: This security update is rated as Critical for all supported versions of Microsoft Windows. Affected Software: Specific software versions or editions affected by this vulnerability are listed in the "Affected Software" section. Affected Software Windows Server 2003, including various editions and service packs. Windows Vista, including various editions and service packs. Windows Server 2008, including various editions and service packs. Windows 7, including various editions and service packs. Windows Server 2012 R2, including Server Core installation option. Severity Rating and Vulnerability Identifiers Affected Software and CVE Identifier: - Windows Telnet Service Buffer Overflow Vulnerability - CVE-2015-0014 Severity Rating: Critical Vulnerability Details Vulnerability Type: Windows Telnet Service Buffer Overflow Vulnerability. CVE Number: CVE-2015-0014 Description: A buffer overflow vulnerability in the Windows Telnet service could lead to remote code execution if the Telnet service does not properly validate user input. Mitigating Factors: By default, Telnet is installed on Windows Server 2003 but not enabled; only customers who have enabled this service are vulnerable. Telnet is not installed by default on Windows Vista and later versions. Workarounds: Microsoft has not identified any workarounds for this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Microsoft Windows Telnet Service Buffer Overflow Vulnerability (CVE-2015-0014) Security Update