MS-RPC: Actual Count Too Large

This protocol anomaly is an MSRPC packet with an ACTUAL_COUNT in a uni-dimensional conformant array that is larger than the MAX_COUNT.

Extended Description

A remote attacker could maliciously craft a packet in which the value of Actual Count is larger than Maximum Count. The impact of the vulnerability depends on the implementation of MSRPC, and could include the disclosure of sensitive information, a buffer overflow, a denial of service, or the execution of malicious code.

References

URL: http://windowssdk.msdn.microsoft.com/en-us/library/ms719418.aspx http://en.wikipedia.org/wiki/MSRPC

Short Name

MS-RPC:ERR:COUNT-TOO-LARGE

Severity

Warning

Recommended

False

Recommended Action

None

MS-RPC: Actual Count Too Large

Extended Description

References

Found a potential security threat?