• info
• discussion
• exploit
• solution
• references

Microsoft Windows WMI Service Isolation Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows Vista x64 Edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=FA153BDC-6B48 -4DF2-9E5E-ABACD6DA782C


• Microsoft Security Update for Windows Vista for x64-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=6dd82f4b-bb33 -41ec-90a7-9ef91329b240

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Vista Home Basic SP1

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Vista beta 2

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Vista Home Premium

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Server 2003 x64 SP1

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=A794C32A-9A0C -47D9-9C57-FF5D4A8E4944


• Microsoft Security Update for Windows XP x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2f12ae5-0e46 -47e1-ac5b-93550d030189

Microsoft Windows Vista 0

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Vista Business

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Vista x64 Edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=FA153BDC-6B48 -4DF2-9E5E-ABACD6DA782C


• Microsoft Security Update for Windows Vista for x64-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=6dd82f4b-bb33 -41ec-90a7-9ef91329b240

Microsoft Windows Vista Ultimate SP1

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=B014C399-F404 -4CB2-8F9D-864DF382EFEB


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0609f65-82d9 -4d82-9f48-f3266e8de123

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Vista SP1

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=EEBB4D4D-29D2 -4247-8CBB-63A3B17585EC


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=20bf4e9b-909b -4bc3-ae43-322d74a4f1c3

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Vista December CTP

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Vista Business SP1

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Vista Home Premium SP1

• Microsoft Security Update for Windows Vista (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=F111B99A-E555 -4F29-8D1F-E9EC03D5CF1F


• Microsoft Security Update for Windows Vista (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d0ea1598-45cb -4c79-8945-caae98969675

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=90FE715E-8190 -43E9-9C43-DF5BE564D923


• Microsoft Security Update for Windows XP (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=73d2324f-be59 -4b0c-b1ac-9876a13c2c03

Microsoft Windows Server 2003 SP1

• Microsoft Security Update for Windows Server 2003 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=25ADEC10-DB8C -4CAC-BF74-2C784678150A


• Microsoft Security Update for Windows Server 2003 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=42aba890-8b76 -4c5a-8fb6-609797d19831

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6ADA372B-BA17 -433E-B022-D2C57B35AF8A


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=fda8837c-e5d2 -4489-9b44-4c24a1102e77

Microsoft Windows Server 2008 Standard Edition 0

• Microsoft Security Update for Windows Server 2008 (KB952004)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=9E3C7B52-65A7 -42FB-BEB5-1B374934737F


• Microsoft Security Update for Windows Server 2008 (KB956572)
  http://www.microsoft.com/downloads/details.aspx?familyid=d58702af-bbf8 -4f1b-ae72-ced9ef23d581