OSVDB ID: 68518

Title: Microsoft Windows on 32-bit Task Scheduler Crafted Application Local Privilege Escalation

Info

Disclosure
Sep 13, 2010

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Oct 12, 2010

Description

 Microsoft Windows contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is caused due to the Windows Task Scheduler failing to properly determine certain scheduled tasks' security context. This may be exploited by malicious, local, context-dependent attackers to gain escalated privileges via a crafted application.

Classification

 Location: Local Access Required, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public
Disclosure: Vendor Verified, Discovered in the Wild

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability. Check the vendor advisory or solution in the references section.

Products

Microsoft Corporation

Windows Vista

 SP1
SP2
x64 Edition SP1
x64 Edition SP2

Windows Server

 2008 SP2
for Itanium-based Systems
2008
2008 R2 for x64-based Systems
2008 R2 for Itandium-based Systems
for Itanium-based Systems SP2

Windows 7

 All Versions

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/68518