Secunia

Ryan Lee has reported a vulnerability in various Microsoft products, which can be exploited by malicious people to gain escalated privileges or compromise a vulnerable system.

The vulnerability is caused due to an error in the Korean Input Method Editor (IME), which causes it to run notepad.exe with SYSTEM privileges when a person displays the "About Korean IME" dialog box and chooses the read the EULA.

Successful exploitation allows execution of arbitrary commands with SYSTEM privileges, but requires access to a login prompt either locally or via RDP (Remote Desktop Protocol).

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Ryan Lee, VMCraft.

Changelog
Further details available in Customer Area

Original Advisory
MS06-009 (KB901190):
http://www.microsoft.com/technet/security/Bulletin/MS06-009.mspx

Ryan Lee:
http://www.ryanstyle.com/alert/my/5/ms06_009_eng.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area