(RemoteProcedureCall (RPC) is a remote procedure call protocol used by the Windows operating system. RPC provides an inter-process interactive communication mechanism that allows a program running on a computer to seamlessly execute code on a remote system. The protocol itself is derived from the RPC protocol of the Open Software Foundation, and Microsoft has added some of its own extensions to it. Due to the lack of detection of the length field of the message by the WindowsRPCDCOM interface, a heap-based overflow occurs, and a remote attacker can exploit these vulnerabilities to execute arbitrary commands on the system with local system privileges.)
收藏
