Home / bulletins MS13-102 - Important : Vulnerability in LRPC Client Could Allow Elevation of Privilege (2898715) - Version: 1.0
Posted on 10 December 2013
ImportantSeverity Rating: Important
Revision Note: V1.0 (December 10, 2013): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Windows. The vulnerability could allow elevation of privilege if an attacker sends a specially crafted LPC port message to any LPC consumer or server. An attacker who successfully exploited the vulnerability could then install programs; view, change, or delete data; or create new accounts with full administrator rights. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.
