Oval Definition:oval:org.mitre.oval:def:958
Revision Date:2015-08-10Version:50
Title:Windows XP RPCSS Service DCOM Activation Denial of Service
Description:An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-0116
Platform(s):Microsoft Windows XP
Product(s):
Definition Synopsis
  • a vulnerable version of rpcss.dll exists depending on service pack level
  • no service pack is installed and rpcss.dll is less than 5.1.2600.135
  • Microsoft Windows XP (32-bit) is installed
  • AND NOT Win2K/XP/2003 is patched
  • AND the version of rpcss.dll is less than 5.1.2600.135
  • OR service pack 1 is installed and rpcss.dll is less than 5.1.2600.1361
  • Microsoft Windows XP SP1 (32-bit) is installed
  • AND the version of rpcss.dll is less than 5.1.2600.1361
  • AND NOT the patch kb828741 is installed
  • AND DCOM is enabled
    • BACK