Muhaimin Dzulfakar

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 **Description** The issue allows local users to gain privileges via a Trojan horse `smmscrpt.dll` file in the current working directory. A remote code execution vulnerability exists in the way that the Internet Connection Signup Wizard handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, update to a version that includes a fix for this issue. For Microsoft Windows Server 2003 version SP2, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of the Internet Connection Signup Wizard until a patch is available. Avoid using the affected `smmscrpt.dll` file in the current working directory until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Windows Address Book version 6.00.2900.5512 in Microsoft Windows XP SP2 and SP3 Windows Address Book in Windows Server 2003 SP2 Windows Address Book in Windows Vista SP1 and SP2 Windows Address Book in Windows Server 2008 Gold, SP2, and R2 Windows Address Book in Windows 7 **Description** The issue allows local users to gain privileges via a Trojan horse `wab32res.dll` file in the current working directory. This can occur in directories containing Windows Address Book (WAB), VCF (aka vCard), or P7C files. A remote code execution vulnerability exists in the way Windows Address Book handles the loading of DLL files, potentially allowing an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** For Windows XP SP2 and SP3, consider disabling the `wab.exe` until a patch is available. For Windows Server 2003 SP2, restrict access to the Windows Address Book to minimize the risk of exploitation. For Windows Vista SP1 and SP2, avoid using the Windows Address Book in directories that may contain malicious `wab32res.dll` files. For Windows Server 2008 Gold, SP2, and R2, and Windows 7, apply configuration changes to prevent the loading of untrusted DLL files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.