Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker could exploit a DFS namespace (non-default) out-of-bound write vulnerability that results in heap corruption, which could then be used to perform arbitrary code execution on the server's dfssvc.exe process which runs as SYSTEM user.
Security updates
10.0.17763.5696 — https://support.microsoft.com/help/5036896
10.0.20348.2402 — https://support.microsoft.com/help/5036909
10.0.25398.830 — https://support.microsoft.com/help/5036910
10.0.14393.6897 — https://support.microsoft.com/help/5036899
6.0.6003.22618 — https://support.microsoft.com/help/5036932
6.0.6003.22618 — https://support.microsoft.com/help/5036950
6.1.7601.27067 — https://support.microsoft.com/help/5036967
6.1.7601.27067 — https://support.microsoft.com/help/5036922
6.2.9200.24821 — https://support.microsoft.com/help/5036969
6.3.9600.21924 — https://support.microsoft.com/help/5036960
Vulnerabilities 1
-
High 7.2
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-29066 Windows Distributed File System (DFS) Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29066
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss