Microsoft Windows Telephony Service Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Windows Telephony Service. This vulnerability allows an attacker to execute arbitrary code on the affected system. It is present in multiple versions of Windows Server, including 2012 R2, 2008 R2, and 2008, as well as in Windows Server 2012 (Server Core installation). The vulnerability arises from a heap-based buffer overflow, which can be exploited by tricking a user into sending a request to a malicious server that returns harmful data.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Remediation

Users can apply the security updates provided in the Microsoft Knowledge Base articles KB5050048, KB5050004, KB5050049, KB5050063, and KB5050061. These updates are available through the Microsoft Update Catalog.