Home / bulletins

MS14-049 - Important: Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (2962490) - Version: 1.1

Posted on 21 August 2014

There is an newer version: MS14-049 - Version: 1.2

Important

Severity Rating: Important
Revision Note: V1.1 (August 20, 2014): Bulletin revised to add prerequisite information for customers running Windows Server 2003 who install updates manually. See Update FAQ for more information.
Summary: This security update resolves a privately disclosed vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker runs a specially crafted application that attempts to repair a previously-installed application. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.

Link

Other versions

• MS14-049 - Version: 1.0
• MS14-049 - Version: 1.1
• MS14-049 - Version: 1.2

 

TOP