Vulnerability Note VU#775933

Microsoft Windows Kernel Vulnerability

Overview

A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system.

I. Description

A locally authenticated user could potentially exploit a vulnerability in the way that the Windows' kernel processes certain access requests. Microsoft indicates that this vulnerability could not be exploited remotely. For more information see the Microsoft bulletin MS05-018.

II. Impact

A locally authenticated user could potentially execute arbitrary code with elevated privileges allowing them to gain complete control of the system.

III. Solution

Apply a patch

Microsoft has published Microsoft Security Bulletin MS05-018 in response to this issue. Users are strongly encouraged to review this advisory and apply the patches it refers to.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Microsoft Corporation	Vulnerable	13-Apr-2005

References

http://www.microsoft.com/technet/security/bulletin/MS05-018.mspx

Credit

Thanks to Microsoft who in turn thank Sanjeev Radhakrishnan, Amit Joshi, and Ananta Iyengar with GreenBorder Technologies for reporting the Windows Kernel Vulnerability

This document was written by Robert Mead based on information provided by Microsoft.

Other Information

Date Public:	2005-04-12
Date First Published:	2005-04-13
Date Last Updated:	2005-04-14
CERT Advisory:
CVE-ID(s):	CAN-2005-0061
NVD-ID(s):	CAN-2005-0061
US-CERT Technical Alerts:
Metric:	2.43
Document Revision:	13

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader