Home / bulletins

MS08-064 – Important: Vulnerability in Virtual Address Descriptor Manipulation Could Allow Elevation of Privilege (956841) - Version:1.1

Posted on 15 October 2008

Important

Severity Rating: Important - Revision Note: V1.1 (October 15, 2008): Corrected the link to a reference MSDN article in FAQ for Virtual Address Descriptor Elevation of Privilege Vulnerability - CVE-2008-4036.Summary: This security update resolves a privately reported vulnerability in Virtual Address Descriptor. The vulnerability could allow elevation of privilege if a user runs a specially crafted application. An authenticated attacker who successfully exploited this vulnerability could gain elevation of privilege on an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

Link

Other versions

 

TOP