>> Microsoft Windows File Manifest Corruption Privilege Escalation Vulnerability (MS06-075)
Title : Microsoft Windows File Manifest Corruption Privilege Escalation Vulnerability (MS06-075) VUPEN ID : VUPEN/ADV-2006-4968 CVE ID : CVE-2006-5585
Rated as : Moderate Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2006-12-12
Technical Description
A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to obtain elevated privileges. This issue is due to a buffer overflow error within the Client-Server Run-time Subsystem (Csrss) when processing file manifests, which could be exploited by malicious users to execute arbitrary commands with elevated privileges.