(MS10-069) Vulnerability in Windows Client/Server Runtime Subsystem Could Allow Elevation of Privilege (2121546)
Publish Date: 20 février 2013
Gravité: : Élevé
Identifiant(s) CVE: : CVE-2010-1891
Date du conseil: 20 février 2013
Description
This security update addresses a vulnerability in Microsoft Windows. Once exploited, it could elevate the privilege of an attacker who is logged on to an affected system configured with a Chinese, Japanese, or Korean system.
In addition, a remote attacker who successfully exploited this vulnerability could do the following: install programs, view and change data among others.
Information Exposure Rating:
For information on patches specific to the affected software, please refer to this Microsoft Web page.
Affected software and version:
- Windows Server 2003 Service Pack 2
- Windows Server 2003 with SP2 for Itanium-based Systems
- Windows Server 2003 x64 Edition Service Pack 2
- Windows XP Professional x64 Edition Service Pack 2
- Windows XP Service Pack 3