Microsoft Windows DFS PathConsumed Code Injection (MS11-042; CVE-2011-1868)

This is a remote code execution vulnerability. The vulnerability is caused by the Microsoft Distributed File System DFS implementation improperly validating all fields within specially crafted DFS responses. An attacker who successfully exploited this vulnerability could take complete control of ...