Vulnerability in Microsoft CTF protocol goes back to Windows XP