US-CERT released the subject Alert 14 November 2014 at about 14:30 EST.
Systems Affected
- Microsoft Windows Server 2003 SP2
- Microsoft Windows Vista SP2
- Microsoft Windows Server 2008 SP2
- Microsoft Windows Server 2008 R2 SP1
- Microsoft Windows 7 SP1
- Microsoft Windows 8
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 R2
- Microsoft Windows RT
- Microsoft Windows RT 8.1
Microsoft Windows XP and 2000 may also be affected.
Overview:
A critical vulnerability in Microsoft Windows systems could allow a remote attacker to execute arbitrary code via specially crafted network traffic.
Review TA14-318A at
https://www.us-cert.gov/ncas/alerts/TA14-318A if you use, support or interface affected systems.
Hope this helps some.
