• info
• discussion
• exploit
• solution
• references

Microsoft Windows Kernel Window Creation Local Privilege Escalation Vulnerability

Solution:
Microsoft has released a security bulletin and updates. Please see the references for details.


Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en

Microsoft Windows Server 2003 Itanium SP1

• Microsoft Security Update for Windows Server 2003 for IB Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=1e6c3f81-85bb -48e6-a5af-635a7e540c93

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for IB Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=1e6c3f81-85bb -48e6-a5af-635a7e540c93

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=57ca28ea-e5e1 -4191-a3d6-84aa90a3d668&displaylang=en

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en

Microsoft Windows Vista Home Premium 64-bit edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=905ab030-14a5 -4a3d-aa11-e8f957f6a1ea

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 for IB Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=1e6c3f81-85bb -48e6-a5af-635a7e540c93

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=b06d3a02-b6e4 -4d40-913a-3759a31f20f3&displaylang=en

Microsoft Windows Vista Ultimate 64-bit edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=905ab030-14a5 -4a3d-aa11-e8f957f6a1ea

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=57ca28ea-e5e1 -4191-a3d6-84aa90a3d668&displaylang=en

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=57ca28ea-e5e1 -4191-a3d6-84aa90a3d668&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e641db2-90c8 -458f-9795-3e46b70a5203&displaylang=en

Microsoft Windows Vista Business SP1

• Microsoft Security Update for Windows Vista (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=3483b400-cedc -441f-ba8e-594e3df89190

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=3a6165a6-d7e7 -4526-9291-290caf0639b4

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1

• Microsoft Security Update for Windows Server 2003 for IB Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=1e6c3f81-85bb -48e6-a5af-635a7e540c93

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=3483b400-cedc -441f-ba8e-594e3df89190

Microsoft Windows Vista Business 64-bit edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=905ab030-14a5 -4a3d-aa11-e8f957f6a1ea

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=3a6165a6-d7e7 -4526-9291-290caf0639b4

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for IB Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=1e6c3f81-85bb -48e6-a5af-635a7e540c93

Microsoft Windows Vista Enterprise 64-bit edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=905ab030-14a5 -4a3d-aa11-e8f957f6a1ea

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Windows XP x64 Edition (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=b06d3a02-b6e4 -4d40-913a-3759a31f20f3&displaylang=en

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=6e696762-d652 -4a8f-ab8f-622f9746c320

Microsoft Windows XP Home SP3

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en

Microsoft Windows Server 2008 for Itanium-based Systems 0

• Microsoft Security Update for Windows Server 2008 for IB Systems (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=b6546e1c-bf7b -4354-8574-6c16fa707de0&displaylang=en

Microsoft Windows XP Professional SP3

• Microsoft Security Update for Windows XP (KB954211)
  http://www.microsoft.com/downloads/details.aspx?familyid=7718bf14-c26c -43f3-be67-4c79ab5b2607&displaylang=en