Authenticated code execution via untrusted pointer dereference

Remote code execution in Microsoft Windows Fax Service allows remote authenticated users to execute code over a network. Microsoft identifies an untrusted pointer dereference but has not disclosed the affected function, input field, or protocol operation that dereferences attacker-controlled data. A low-privileged account is required; successful exploitation executes code in the Fax Service security context without user interaction.