Microsoft published four security bulletins (MS11-053, MS11-054,
MS11-55 and MS11-056) with patches for 22 serious security flaw and
revealed Windows Bluetooth Stack Vulnerability which possible allow
hackers to remote control affected computer. Windows Bluetooth Stack
Vulnerability fixed with Microsoft Security Bulletin MS11-053 that
include batch of updates include fixes for vulnerability in Windows
kernel and security problems in Windows Client / Server run-time
subsystem.
Windows Bluetooth Stack Vulnerability exists in Windows Bluetooth 2.1
Stack due to the way an object in memory is accessed when it has not
been correctly initialized or has been deleted. This vulnerability
allow attacker to install programs; view, change, or delete data; or
create new accounts with full user rights by constructing series of
specially crafted Bluetooth packets and sending them to target
machine.
MS11-053 addresses Windows Bluetooth Stack vulnerability by modifying
the way that the Windows Bluetooth Stack handles objects in memory.
The operating system affected by this Windows Bluetooth stack
vulnerability include Windows Vista and Windows 7 with Bluetooth
capability.
Before you apply update, you can use below commands to disable
bluetooth driver as workarounds for this Windows Bluetooth Stack
vulnerability which suggested by Microsoft.
sc config bthport start= disabled
And you can enable back the bluetooth driver with below command:
sc config bthport start= demand
via pupuweb Blog [
http://www.pupuweb.com/blog/microsoft-published-
ms11-053-fix-bluetooth-stack-vulnerability/]