Multiple vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.

1) Multiple use-after-free errors within the Win32k kernel-mode driver (win32k.sys) when handling kernel-mode driver objects can be exploited to execute arbitrary code in kernel-mode.

2) Multiple NULL pointer dereference errors within the Win32k kernel-mode driver (win32k.sys) when handling pointers to kernel-mode driver objects can be exploited to execute arbitrary code in kernel-mode.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Tarjei Mandt, Norman.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS11-034 (KB2506223):
http://www.microsoft.com/technet/security/bulletin/MS11-034.mspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers