eEye Digital Security has discovered a critical remote vulnerability in the way Microsoft Windows handles certain RPC requests. A vulnerability exists within the DCOM (Distributed Component Object Model) RPC interface. Sending a malformed request packet, it is possible to overwrite various heap structures and allow the execution of arbitrary code. Note: this vulnerability differs from the vulnerability publicized in Microsoft Bulletin MS03-026.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31620/rpcagain.txt
Source: https://packetstormsecurity.com/files/31620/rpcagain.txt.html