Some vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.

1) An error in the Win32k kernel-mode driver (win32k.sys) when validating input passed from user mode can be exploited to execute arbitrary code in kernel-mode.

2) An error in the Win32k kernel-mode driver (win32k.sys) when validating input passed from user mode can be exploited to execute arbitrary code in kernel-mode.

3) A validation error in the Win32k kernel-mode driver (win32k.sys) when handling window class pointers can be exploited to execute arbitrary code in kernel-mode.

4) A validation error in the Win32k kernel-mode driver (win32k.sys) when handling window class pointers can be exploited to execute arbitrary code in kernel-mode.

5) An error in the Win32k kernel-mode driver (win32k.sys) when validating input passed from user mode can be exploited to corrupt memory.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Tarjei Mandt, Norman.

Original Advisory
MS11-012 (KB2479628)
http://www.microsoft.com/technet/security/bulletin/ms11-012.mspx

Deep Links
Links available to Secunia VIM customers