>> Microsoft Windows Vista Local Privilege Escalation Vulnerability (MS07-066)
Title : Microsoft Windows Vista Local Privilege Escalation Vulnerability (MS07-066) VUPEN ID : VUPEN/ADV-2007-4182 CVE ID : CVE-2007-5350
Rated as : Moderate Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2007-12-11
Technical Description
A vulnerability has been identified in Microsoft Windows Vista, which could be exploited by local attackers to gain elevated privileges. This issue is caused by an error in the way Advanced Local Procedure Call (ALPC) validates certain conditions in legacy reply paths, which could allow authenticated users to execute arbitrary code with elevated privileges and take complete control of an affected system.
