RPC Network Data Representation Engine Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in the way Microsoft Windows handles specially crafted <a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#RPC">Remote Procedure Call (RPC)</a> requests. The remote code execution can occur when the <a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#RPCNDR">RPC Network Data Representation (NDR) Engine</a> improperly frees memory. An authenticated attacker who successfully exploited this vulnerability could execute arbitrary code and take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An authenticated attacker could exploit the vulnerability by making malformed RPC requests to an affected host.</p> <p>The update addresses this vulnerability by modifying the way that Microsoft Windows handles RPC messages.</p>

Where it's fixed