Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.

1) An input validation error in the Win32k kernel-mode driver (Win32k.sys) when invoking a system call can be exploited to execute arbitrary code in kernel mode.

2) An error in the Win32k kernel-mode driver (Win32k.sys) when handling input passed through the kernel component of GDI (Graphics Device Interface) can be exploited to execute arbitrary code in kernel mode.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Agin Sun.

Original Advisory
MS09-065 (KB969947):
http://www.microsoft.com/technet/security/Bulletin/MS09-065.mspx

Deep Links
Links available to Secunia VIM customers