Invalid Universal Plug and Play Request Can Disrupt Computer Operation (311311)
The information in this article applies to:
- Microsoft Windows Millennium Edition
This article was previously published under Q311311 For additional information on
how this vulnerability affects Windows XP, Windows 98, and Windows 98 Second
Edition, click the article number below to view the article in the Microsoft
Knowledge Base: 309073 Invalid Universal Plug and Play Request can Disrupt System Operation
SYMPTOMS By sending a particular set of commands to an affected
Windows Millennium Edition (Me) computer, an attacker could cause a variety of
effects, from slowing the computer's performance to causing it to fail
altogether. For example, you may receive either of the following error messages
on a computer that is running Windows Me with the Universal Plug and Play
driver installed: SSDPSRV.EXE Caused An invalid
pagefault in module MSVCRT.DLL at 0197:78004a16 SSDPSRV.EXE Caused An invalid pagefault in module MSVCRT.DLL at
0197:010083fe On Windows Me, the affected component is available as
part of the operating system, but it is not installed by default. However, some
hardware manufacturers do install it on the systems they sell. CAUSE This vulnerability results because the Universal Plug and
Play service that either is included with, or can be installed on, Windows Me
does not correctly process certain requests. In Windows Me, these requests can
cause an access violation error message and result in the computer failing.
RESOLUTIONA
supported fix is now available from Microsoft, but it is only intended to
correct the problem that is described in this article. Apply it only to
computers that you determine are at risk of attack. Evaluate your computer's
physical accessibility, network and Internet connectivity, and other factors to
determine the degree of risk to your computer. See the associated
Microsoft
Security Bulletin to help determine the degree of risk. This fix may
receive additional testing. If your computer is sufficiently at risk, Microsoft
recommends that you apply this fix now. To resolve this problem
immediately, download the fix by clicking the download link later in this
article or contact Microsoft Product Support Services to obtain the fix. For a
complete list of Microsoft Product Support Services phone numbers and
information about support costs, please visit the following Microsoft Web site: NOTE: In special cases, charges that are ordinarily incurred for
support calls may be canceled, if a Microsoft Support Professional determines
that a specific update will resolve your problem. The usual support costs will
apply to additional support questions and issues that do not qualify for the
specific update in question. The following file is available for
download from the Microsoft Download Center: Release Date:
October 29, 2001 For additional information about how to download
Microsoft Support files, click the following article number to view the article
in the Microsoft Knowledge Base: 119591 How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most
current virus-detection software that was available on the date that the file
was posted. The file is stored on security-enhanced servers that help to
prevent any unauthorized changes to the file.
The English version of this fix should have the
following file attributes or later:
Date Time Version Size File name
-----------------------------------------------------
25-Oct-2001 00:24 4.90.3002.0 38,672 Ssdpapi.dll
25-Oct-2001 00:24 4.90.3002.0 36,864 Ssdpsrv.exe
25-Oct-2001 00:24 4.90.3002.0 128,272 Upnp.dll
STATUSMicrosoft has confirmed that this problem may cause a
degree of security vulnerability in Microsoft Windows
Millennium.
| Modification Type: | Minor | Last Reviewed: | 9/26/2005 |
|---|
| Keywords: | kbHotfixServer kbQFE kbdownload kbbug kbenv kberrmsg kbfix kbQFE KbSECHack kbSecurity KbSECVulnerability KB311311 |
|---|
|
