Home / bulletins MS10-100 - Important: Vulnerability in Consent User Interface Could Allow Elevation of Privilege (2442962) - Version:1.0
Posted on 14 December 2010
ImportantSeverity Rating: Important - Revision Note: V1.0 (December 14, 2010): Bulletin published.Summary: This security update resolves a privately reported vulnerability in the Consent User Interface (UI). The vulnerability could allow elevation of privilege if an attacker runs a specially crafted application on an affected system. An attacker must have valid logon credentials and the SeImpersonatePrivilege and be able to log on locally to exploit this vulnerability. The vulnerability could not be exploited remotely or by anonymous users.