MS.Windows.Object.Packager.Insecure.Remote.Code.Execution

Release Date Jan 12, 2012
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attempt to exploit a remote Code Execution vulnerability in Windows. The vulnerability is caused by the way the vulnerable application launches "packager.exe". A remote attacker can exploit it to load and execute a malicious executable file.
Affected Products Windows XP Service Pack 3 Windows XP Professional x64 Edition Service Pack 2 Windows Server 2003 Service Pack 2 Windows Server 2003 x64 Edition Service Pack 2 Windows Server 2003 with SP2 for Itanium-based Systems
Recommended Actions Apply the most recent upgrade or patch from the vendor: http://www.microsoft.com/technet/security/Bulletin/MS12-002.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2012-0009
Reference/s http://technet.microsoft.com/en-us/security/bulletin/MS12-002.mspx (MS-ID) http://www.securityfocus.com/bid/51297 (BugTraq)

Fortinet