Secunia

Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to compromise a vulnerable system.

1) An error in Winlogon when searching for DLL files when applications are started can be exploited by a malicious, local user to gain escalated privileges by placing a malicious DLL file in the user directory.

NOTE: Only Windows 2000 is affected by default as other OS versions have "SafeDllSearchMode" set to "1" by default.

2) An error in the exception handling management when multiple applications are resident in memory can be exploited to execute arbitrary code by tricking a user into visiting a malicious website.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits Reed Arvin, Canaudit Inc.
2) The vendor credits Matt Miller, Leviathan Security Group working with Ken Johnson.

Changelog
Further details available in Customer Area

Original Advisory
MS06-051 (KB917422):
http://www.microsoft.com/technet/security/Bulletin/MS06-051.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area