iDefense Security Advisory 04.08.08 – Remote exploitation of a heap based buffer overflow vulnerability in multiple versions of Microsoft Corp.’s Windows operating system could allow an attacker to execute arbitrary code with the privileges of the current user. iDefense has confirmed the existence of this vulnerability in Windows 2000 Service Pack 4, Windows XP Service Pack 2, Windows Server 2003 Service Pack 1, Windows Server 2003 Service Pack 2, and Windows Vista.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/65352/04.08.08-3.txt
Source: https://packetstormsecurity.com/files/65352/iDEFENSE-Security-Advisory-2008-04-08.3.html