Description: This security update resolves a privately reported vulnerability in the Web Services on Devices Application Programming Interface (WSDAPI) on the Windows operating system. The vulnerability could allow remote code execution if an affected Windows system receives a specially crafted packet. Only attackers on the local subnet would be able to exploit this vulnerability. The security update addresses the vulnerability by correcting the processing of headers in WSD messages.

Update type: Critical

Release date: November 10, 2009

Applies to: All versions

Knowledge base: support.microsoft.com/kb/973565

Download link: 32-bit | 64-bit
Comments:Here are the specifics on the vulnerabilities covered by this update:

• Web Services on Devices API Memory Corruption Vulnerability – CVE-2009-2512

ITsVISTA

KB973565

Related posts

• KB959454
• KB941600
• KB961741
• KB937143
• KB938194