Thread-topic: [SA23308] Microsoft Windows File Manifest Privilege Escalation Vulnerability
TITLE:
Microsoft Windows File Manifest Privilege Escalation Vulnerability
SECUNIA ADVISORY ID:
SA23308
VERIFY ADVISORY:
CRITICAL:
Less critical
IMPACT:
Privilege escalation
WHERE:
Local system
OPERATING SYSTEM:
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional
DESCRIPTION:
A vulnerability has been reported in Microsoft Windows, which can be
exploited by malicious, local users to gain escalated privileges.
The vulnerability is caused due to an error in the Client-Server
Run-time Subsystem when processing file manifests and can be
exploited by starting up an applications with specially crafted file
manifest.
Successful exploitation allows execution of arbitrary code with
escalated privileges.
SOLUTION:
Apply patches.
Microsoft Windows XP SP2:
Microsoft Windows Server 2003:
Microsoft Windows Server 2003 for Itanium-based systems:
PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.
ORIGINAL ADVISORY:
MS06-075 (KB926255):
