TITLE: Microsoft Windows XP Fix for Buffer Overrun In RPC Interface VERSION: 1.00 Rev A DESCRIPTION: This contains the Windows XP fix for the possible security vulnerability explained in Microsoft Knowledge Base Article 823980. Microsoft originally released this bulletin and patch on July 16, 2003, to correct a security vulnerability in a Windows Distributed Component Object Model (DCOM) Remote Procedure Call (RPC) interface. The patch was and still is effective in eliminating the security vulnerability. However, the "mitigating factors" and "workarounds" discussions in the original security bulletin did not clearly identify all the ports by which the vulnerability could potentially be exploited. Microsoft has updated this bulletin to more clearly enumerate the ports over which RPC services can be invoked and to make sure that customers who choose to implement a workaround before installing the patch have the information that they must have to protect their systems. Customers who have already installed the patch are protected from attempts to exploit this vulnerability and do not have to take further action. PURPOSE: Recommended Update SOFTPAQ NUMBER: SP25124 SUPERSEDES: None EFFECTIVE DATE: August 18, 2003 CATEGORY: OS and OS Enhancements SSM SUPPORTED: Yes PRODUCT TYPE(S): Desktops PRODUCT MODEL(S): D315 Business PC Evo D300 Convertible Minitower: All Models Evo D300 Small Form Factor: All Models Evo D300s Evo D300v: All Models Evo D310 Evo D310 Convertible Microtower: All Models Evo D310 Desktop: All Models Evo D310 Microtower: All Models Evo D310 Slim Tower: All Models Evo D310v Evo D320 Evo D500 Convertible Minitower: All Models Evo D500 Desktop: All Models Evo D500 Small Form Factor: All Models Evo D500 Ultra-slim Desktop: All Models Evo D510 Convertible Minitower: All Models Evo D510 e-pc Evo D510 Small Form Factor: All Models Evo D510 Ultra-slim Desktop: All Models HP Compaq Business Desktop d325 HP Compaq Business Desktop d330 Desktop HP Compaq Business Desktop d330 Microtower HP Compaq Business Desktop d330 Slim Tower HP Compaq Business Desktop d530 Convertible Minitower HP Compaq Business Desktop d530 Small Form Factor HP Compaq Business Desktop d530 Ultra-slim Desktop HP rp5000 point of sale system OPERATING SYSTEM(S): Microsoft Windows XP 32-bit Home Microsoft Windows XP 32-bit Professional LANGUAGE(S): Global PREREQUISITES: N/A HOW TO USE: 1. Download the SoftPaq .EXE file to a directory on your hard drive. 2. Execute the downloaded file and follow the on-screen instructions. Copyright (c) 2003 Hewlett-Packard Development Company, L.P.