The vulnerability caused due to insufficient bound checking of the input string by Message Queuing MSMQ service before passing them to the buffer. An attacker could exploit this vulnerability remotely by creating and sending specially crafted packets to MSMQ service on the vulnerable system. Successful exploitation could corrupt the system memory to cause buffer overflow and allows attacker to execute arbitrary code to take complete control of the system.
The information provided herein is on "as is" basis, without warranty of any kind.