Microsoft Security Bulletin MS08-041 Critical

BioWin7®
RTM MOD™
Server® OS: Linux g
PHP: 5.2.17
MySQL:
5.5.21-55
Hora: 11:42
Caching: Disabled
GZIP: Disabled
Usuarios: 276
Noticias: 751
Enlaces: 6

Visitantes:4635688

Wednesday, 15 de October de 2008

Microsoft Security Bulletin MS08-041 – Critical

Revised- Update 14 Octubre 2008

Vulnerability in Virtual Address Descriptor Manipulation Could Allow Elevation of Privilege (956841)

Published: October 14, 2008

Version: 1.0

General Information

Executive Summary

This security update resolves a privately reported vulnerability in Virtual Address Descriptor. The vulnerability could allow elevation of privilege if a user runs a specially crafted application. An authenticated attacker who successfully exploited this vulnerability could gain elevation of privilege on an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

This security update is rated Important for all supported editions of Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerability by modifying the way that Virtual Address Descriptor handles memory allocation variables. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.

Recommendation. Microsoft recommends that customers apply the update at the earliest opportunity.

Known Issues. None

Top of section

Affected and Non-Affected Software

The following software have been tested to determine which versions or editions are affected. Other versions or editions are either past their support life cycle or are not affected. To determine the support life cycle for your software version or edition, visit Microsoft Support Lifecycle.

Affected Software

Operating System	Maximum Security Impact	Aggregate Severity Rating	Bulletins Replaced by this Update
Windows XP Service Pack 2	Elevation of Privilege	Important	MS07-022
Windows XP Service Pack 3	Elevation of Privilege	Important	None
Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2	Elevation of Privilege	Important	Microsoft Security Advisory (932596)
Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2	Elevation of Privilege	Important	MS07-022
Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2	Elevation of Privilege	Important	Microsoft Security Advisory (932596)
Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems	Elevation of Privilege	Important	None
Windows Vista	Elevation of Privilege	Important	MS07-066
Windows Vista Service Pack 1	Elevation of Privilege	Important	None
Windows Vista x64 Edition	Elevation of Privilege	Important	MS07-066
Windows Vista x64 Edition Service Pack 1	Elevation of Privilege	Important	None
Windows Server 2008 for 32-bit Systems*	Elevation of Privilege	Important	None
Windows Server 2008 for x64-based Systems*	Elevation of Privilege	Important	None
Windows Server 2008 for Itanium-based Systems	Elevation of Privilege	Important	None

*Windows Server 2008 server core installation affected. For supported editions of Windows Server 2008, this update applies, with the same severity rating, whether or not Windows Server 2008 was installed using the Server Core installation option. For more information on this installation option, see Server Core. Note that the Server Core installation option does not apply to certain editions of Windows Server 2008; see Compare Server Core Installation Options.

Non-Affected Software