Microsoft .NET Runtime Optimization Service Local Privilege Escalation Vulnerability

Bugtraq ID:	46773
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 08 2011 12:00AM
Updated:	Mar 21 2011 02:06PM
Credit:	XenoMuta
Vulnerable:	Microsoft .NET Runtime Optimization Service 2.0.50727
Not Vulnerable:

Microsoft .NET Runtime Optimization Service Local Privilege Escalation Vulnerability

Microsoft .NET Runtime Optimization Service is prone to a local privilege-escalation vulnerability.

Successful exploits will allow attackers to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

Microsoft .NET Runtime Optimization Service 2.0.50727 is vulnerable; other versions may also be affected.

Microsoft .NET Runtime Optimization Service Local Privilege Escalation Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/46773.c

Microsoft .NET Runtime Optimization Service Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft .NET Runtime Optimization Service Local Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)