A vulnerability has been identified in Microsoft Windows, which could be exploited by malicious users to obtain elevated privileges. This issue is due to a buffer overflow error in the Windows Image Acquisition (WIA) service when starting applications, which could be exploited by local attackers to execute arbitrary commands with SYSTEM privileges and take complete control of the affected system.

Affected Products

Microsoft Windows XP Service Pack 2

Solution

Apply patch :
http://www.microsoft.com/downloads/details.aspx?FamilyId=ce695e0e-938c-4fc6-a9a2-0eb9fc3e5512

References

http://www.vupen.com/english/advisories/2007/0576
http://www.microsoft.com/technet/security/bulletin/ms07-007.mspx

Credits

Vulnerability reported by the vendor

Changelog

2007-02-13 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.