CVE-2014-0316 Windows LRPC Security Feature Bypass Advisory

Key Information Vulnerability Overview Vulnerability Type: Security Feature Bypass Vulnerability ID: CVE-2014-0316 Vulnerability Description: A vulnerability in LRPC (Local RPC) could allow an attacker to bypass the ASLR (Address Space Layout Randomization) security feature when combined with other vulnerabilities (such as remote code execution vulnerabilities), enabling the execution of arbitrary code. Affected Software Affected Software: - Windows 7 (32-bit and x64-based systems) - Windows Server 2008 R2 - Windows 8 and Windows 8.1 (32-bit and x64-based systems) - Windows RT and Windows RT 8.1 Unaffected Software: - Windows Server 2003 - Windows Server 2003 x64 Edition - Windows Vista - Windows Server 2008 (for 32-bit and Itanium-based systems) Severity and Vulnerability Identifier Severity Rating: Important CVE ID: CVE-2014-0316 Detection and Deployment Tools and Guidance Update FAQ: Provides information regarding update application and system support. Detection and Deployment Tools: Includes Microsoft Baseline Security Analyzer, Windows Server Update Services, and System Center Configuration Manager. Common Questions: Frequently asked questions about security updates. Security Update Deployment Windows 7: KB2978668-x86.msu and KB2978668-x64.msu Windows Server 2008 R2: KB2978668-x64.msu and KB2978668-ia64.msu Windows 8 and Windows 8.1: KB2978668-x86.msu and KB2978668-x64.msu Windows RT and Windows RT 8.1: Available only through Windows Update. Additional Information Acknowledgments: Thanks to Alex Ionescu for reporting this vulnerability. Microsoft Active Protections Program (MAPP): Provides early vulnerability information to security software vendors. Technical Support: Offers various support and assistance links.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2014-0316 Windows LRPC Security Feature Bypass Advisory