Microsoft added DCOM to Windows NT, and eventually to Windows 95, around 1996. Previously, OLE was primarily used on a single computer and for relatively simple tasks, such as allowing Excel to import text from Word. When an early Windows computer was first hooked up to a network, however, these associations were strained as files were shared and sent to other computers elsewhere on the network. DCOM allowed Windows applications to share objects no matter where the original objects were stored.
The problem is that RPC, like other services that use DCOM, is turned on by default for all Windows versions, whether or not you are working on a network. Also, when your system is connected to the Internet, DCOM makes Windows automatically listen on port 135 (and others) for remote signals. This means that a hacker need only construct a special message and aim it at port 135 on your Windows computer to cause a buffer-overflow error. The buffer overflow, in turn, could replace part of a program's original code with new code.
Teman kelas yg mati ikut berphoto
