CVE-2017-0176

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions prior to SP3 Microsoft Windows Server 2003 versions prior to SP2

Description A buffer overflow in the Smart Card authentication code in gpkcsp.dll allows a remote attacker to execute arbitrary code on the target computer. This issue affects computers that are part of a Windows domain and have Remote Desktop Protocol connectivity or Terminal Services enabled.

Recommendations For Microsoft Windows XP versions prior to SP3, update to SP3 or a later service pack to resolve the issue. For Microsoft Windows Server 2003 versions prior to SP2, update to SP2 or a later service pack to resolve the issue.