A WSDAPI message with a long MIME header value
can lead to a stack corruption when a NULL byte is written at an
attacker-controlled offset.
This could be exploited for remote code execution in the context of any
of the WSD services, all of which listen on TCP/5357 and TCP/5358. It's
also possible for a malicious host to respond to a user query for
devices with an HTTP response crafted to exploit this vulnerability.
An attacker who successfully exploited this vulnerability could take
complete control of an affected system. An attacker could then install
programs, view, change, delete data, or create new accounts with full
user rights.
