||2017-12 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4054518)
||Security Update for Microsoft Windows Rollups and Security Only Updates (KB4054519)
||A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could execute code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable.
The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests.
|Superceding Bulletin Id
|Patch Release Date
||Dec 12, 2017
Affected Product Information
||Service Pack Name
|Windows 7 Ultimate Edition (x64)||Windows 7 SP1 (x64)|
|Windows 7 Professional Edition (x64)||Windows 7 SP1 (x64)|
|Windows 7 Enterprise Edition (x64)||Windows 7 SP1 (x64)|
|Windows 7 Embedded Standard Edition (x64)||Windows 7 SP1 (x64)|
|Windows 7 Home Premium Edition (x64)||Windows 7 SP1 (x64)|