Secunia

Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to potentially gain escalated privileges.

1) An error exists in the Windows kernel when truncating a 64-bit value to a 32-bit value. This can be exploited to trigger an integer underflow and potentially execute arbitrary code in kernel mode.

2) An error exists in the Windows kernel when processing certain data contained within executables. This can be exploited to trigger a NULL-pointer dereference and potentially execute arbitrary code in kernel mode.

3) An error in the Windows kernel when handling exceptions can be exploited to cause a system crash.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1, 3) The vendor credits Tavis Ormandy and Neel Mehta of Google Inc.
2) The vendor credits the NSFocus Security Team.

Original Advisory
Microsoft (KB971486):
http://www.microsoft.com/technet/security/Bulletin/MS09-058.mspx

Deep Links
Links available in Customer Area