Home / bulletins

MS11-014 - Important: Vulnerability in Local Security Authority Subsystem Service Could Allow Local Elevation of Privilege (2478960) - Version:1.0

Posted on 10 February 2011

There is an newer version: MS11-014 - Version: 1.1

Important

Severity Rating: Important - Revision Note: V1.0 (February 8, 2011): Bulletin publishedSummary: This security update resolves a privately reported vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows XP and Windows Server 2003. This security update is rated Important for all supported editions of these operating systems. For more information, see the subsection, Affected and Non-Affected Software, in this section. The vulnerability could allow elevation of privilege if an attacker logs on to a system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The vulnerability could not be exploited remotely or by anonymous users.

Link

Other versions

• MS11-014 - Version: 1.0
• MS11-014 - Version: 1.1

 

TOP