Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library as used in Microsoft Windows NT 4.0 SP6a 2000 SP2 through SP4 XP SP1 Server 2003 NetMeeting Windows 98 and Windows ME allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.