Internet Connection Sharing Service Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Internet Connection Sharing (ICS) service when an attacker sends specially crafted packets to the server. An attacker who successfully exploited the vulnerability could run arbitrary code on the server with elevated privileges.

To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server.

The security update addresses the vulnerability by correcting how the Internet Connection Sharing (ICS) service handles network packets.