Microsoft Windows Server First Class Mailslot Message Remote Code Execution

Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to expose sensitive information and compromise a vulnerable system. 1) A boundary error in the Server service (SRV.SYS) when handling first-class Mailslot messages can be exploited to corrupt memory by sending a specially crafted packet to the service. Successful exploitation allows execution of arbitrary code. 2) An uninitialised buffer in the Server protocol driver can be exploited to view data from the Server Message Block buffers by sending specially crafted packets to the service.