Secunia Logo  


Secunia PSI WorldMap
 
Microsoft Windows Kernel Privilege Escalation Vulnerabilities
Secunia Advisory: SA35372
Release Date: 2009-06-09
Last Update: 2009-06-15
Popularity: 2,357 views

Critical:
Less critical
Impact: Privilege escalation
Where: Local system
Solution Status: Vendor Patch

OS:Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2008
Microsoft Windows Storage Server 2003
Microsoft Windows Vista
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional

Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply patches.

Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=79b0481d-a3d7-477b-928a-a98cc79374af

Windows XP SP2/SP3:
http://www.microsoft.com/downloads/de...=6349e046-a3f8-4ae5-b8c3-c9879cc99e8f

Windows XP Professional x64 Edition SP2:
http://www.microsoft.com/downloads/de...=3769800e-af93-4a44-8a1e-b30cc54b226f

Windows Server 2003 SP2:
http://www.microsoft.com/downloads/de...=9356404c-d89a-4de0-b9b4-f6e1bdadf745

Windows Server 2003 x64 Edition SP2:
http://www.microsoft.com/downloads/de...=5a3123af-173d-49eb-9997-14e82e764aee

Windows Server 2003 with SP2 for Itanium-based Systems:
http://www.microsoft.com/downloads/de...=13b50993-410f-4e7a-a33a-6d9b48dbb4d1

Windows Vista (optionally with SP1):
http://www.microsoft.com/downloads/de...=c31b36f8-330c-4a0c-9a3d-7cbe9a1ab8c8

Windows Vista SP2:
http://www.microsoft.com/downloads/de...=c31b36f8-330c-4a0c-9a3d-7cbe9a1ab8c8

Windows Vista x64 Edition (optionally with SP1):
http://www.microsoft.com/downloads/de...=7d70a65f-07ce-4992-8bec-28fefd7587bc

Windows Vista x64 Edition SP2:
http://www.microsoft.com/downloads/de...=7d70a65f-07ce-4992-8bec-28fefd7587bc

Windows Server 2008 for 32-bit Systems:
http://www.microsoft.com/downloads/de...=98ba52b2-da1a-4939-a10e-d43b3a7e7ed4

Windows Server 2008 for 32-bit Systems SP2:
http://www.microsoft.com/downloads/de...=98ba52b2-da1a-4939-a10e-d43b3a7e7ed4

Windows Server 2008 for x64-based Systems:
http://www.microsoft.com/downloads/de...=dbaa5a72-c267-4907-a207-525c2803d7b9

Windows Server 2008 for x64-based Systems SP2:
http://www.microsoft.com/downloads/de...=dbaa5a72-c267-4907-a207-525c2803d7b9

Windows Server 2008 for Itanium-based Systems:
http://www.microsoft.com/downloads/de...=e0e3ad56-a363-44ba-af4d-b7f551c88afd

Windows Server 2008 for Itanium-based Systems SP2:
http://www.microsoft.com/downloads/de...=e0e3ad56-a363-44ba-af4d-b7f551c88afd

Provided and/or discovered by:
1) Reported by the vendor.
2-3) The vendor credits Thomas Garnier.

Changelog:
2009-06-15: Removed vulnerability #4 as this is covered by SA35323.

Original Advisory:
MS09-025 (KB968537):
http://www.microsoft.com/technet/security/Bulletin/MS09-025.mspx

Change Page:
[ 1 ] [ 2 ] [ 3 ]



Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Adobe Reader/Acrobat "Doc.media.newPlayer()" Memory Corruption // 68 views
2. Mozilla Firefox Multiple Vulnerabilities // 67 views
3. Adobe Flash Player Multiple Vulnerabilities // 48 views
4. Mozilla Thunderbird JavaScript Engine Memory Corruption // 26 views
5. Red Hat update for kernel // 22 views
6. Mozilla SeaMonkey Multiple Vulnerabilities // 19 views
7. PyForum Multiple Vulnerabilities // 18 views
8. Red Hat update for xpdf // 17 views
9. IBM WebSphere Application Server Two Vulnerabilities // 17 views
10. Red Hat update for kernel // 15 views