Microsoft Windows Local Procedure Call (LPC) Local Privilege Escalation Vulnerability

Bugtraq ID:	43860
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 07 2010 12:00AM
Updated:	Sep 07 2010 12:00AM
Credit:	yuange
Vulnerable:	Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional SP3 Microsoft Windows XP Media Center Edition SP3 Microsoft Windows XP Home SP3 Microsoft Windows XP Embedded SP3
Not Vulnerable:

Microsoft Windows Local Procedure Call (LPC) Local Privilege Escalation Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/43860.c

Microsoft Windows Local Procedure Call (LPC) Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Local Procedure Call (LPC) Local Privilege Escalation Vulnerability

References:

• LPC 0day (yuange)
  
• Microsoft Windows Homepage (Microsoft )