(MS13-102) Vulnerability in LRPC Client Could Allow Elevation of Privilege (2898715)
Publish date: 26 de diciembre de 2013
Gravedad: High
Identificadores de CVE : CVE-2013-3878
Fecha recomendada: 26 de diciembre de 2013
Descripción
This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker spoofs an LRPC server and sends a specially crafted LPC port message to any LRPC client. An attacker who successfully exploited the vulnerability could then install programs; view, change, or delete data; or create new accounts with full administrator rights. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.
Soluciones
Software y versión afectados
- Windows Server 2003 x64 Edition Service Pack 2
- Windows XP Service Pack 3
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003 Service Pack 2
- Windows Server 2003 with SP2 for Itanium-based Systems