CVE-2008-3479

Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote attackers to read memory contents and execute arbitrary code via a crafted RPC call, related to improper processing of parameters to string APIs, aka "Message Queuing Service Remote Code Execution Vulnerability."

Date published : 2008-10-14

http://www.securityfocus.com/bid/31637

http://www.us-cert.gov/cas/techalerts/TA08-288A.html