Microsoft Windows DHCP Client Remote Code Execution

A heap overflow vulnerability exists in the 'dhcpcore.dll' component of Windows DHCP Client. The vulnerability is triggered by two subsequent null bytes in a Domain Search DHCP Option within a DHCP Offer packet, followed by an arbitrary number of bytes, causing a zero-length buffer to be written, thus overwriting a invalid memory space. By exploiting the vulnerability, an attacker may be able to execute arbitrary code with SYSTEM privileges.