A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges or by malicious people to compromise a user's system.

The vulnerability is caused due to an input validation error in the Win32 API when handling parameters to a function call. This can be exploited to execute arbitrary code via a local application using the vulnerable component or when a user e.g. views a specially crafted web page using Internet Explorer.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Billy Rios, VeriSign.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-035 (KB935839):
http://www.microsoft.com/technet/security/bulletin/ms07-035.mspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers