(MS11-011) Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2393802)

This security update addresses vulnerabilities in Microsoft Windows, which could allow elevation of privilege if an attacker logged on locally and ran a specially crafted application. However, an attacker must have valid logon credentials and be able to log on locally to exploit these vulnerabilities. An attacker cannot exploit the vulnerabilities anonymously nor remotely. More specifically, the update addresses the vulnerabilities by ensuring that the Windows kernel properly validates user-supplied data before allocating memory.

Note for affected software: *Server Core installation affected. This update applies, with the same severity rating, to supported editions of Windows Server 2008 or Windows Server 2008 R2 as indicated, whether or not installed using the Server Core installation option.