Microsoft Windows NDISTAPI CVE-2011-1974 Local Privilege Escalation Vulnerability

Bugtraq ID:	48996
Class:	Unknown
CVE:	CVE-2011-1974
Remote:	No
Local:	Yes
Published:	Aug 09 2011 12:00AM
Updated:	Oct 26 2016 01:16AM
Credit:	Lufeng Li of the Neusoft Corporation
Vulnerable:	Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP3 Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Home SP3 Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 0 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista x64 Edition SP1 Microsoft Windows Vista x64 Edition 0 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 x64 SP1 Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 Itanium SP1 Microsoft Windows Server 2003 Itanium 0 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1
Not Vulnerable:

Microsoft Windows NDISTAPI CVE-2011-1974 Local Privilege Escalation Vulnerability

Microsoft Windows is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

Microsoft Windows NDISTAPI CVE-2011-1974 Local Privilege Escalation Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/48996.c

Microsoft Windows NDISTAPI CVE-2011-1974 Local Privilege Escalation Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB2566454)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27 038

Microsoft Windows NDISTAPI CVE-2011-1974 Local Privilege Escalation Vulnerability

References:

• Microsoft Windows Homepage (Microsoft )
  
• Microsoft Security Bulletin MS11-062 - Important (Lufeng Li)