Home / bulletins MS08-064 – Important: Vulnerability in Virtual Address Descriptor Manipulation Could Allow Elevation of Privilege (956841) - Version:1.1
Posted on 15 October 2008
ImportantSeverity Rating: Important - Revision Note: V1.1 (October 15, 2008): Corrected the link to a reference MSDN article in FAQ for Virtual Address Descriptor Elevation of Privilege Vulnerability - CVE-2008-4036.Summary: This security update resolves a privately reported vulnerability in Virtual Address Descriptor. The vulnerability could allow elevation of privilege if a user runs a specially crafted application. An authenticated attacker who successfully exploited this vulnerability could gain elevation of privilege on an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
Other versions
- MS08-064 - Version: 1.0
- MS08-064 - Version: 1.1