Microsoft Windows Knowledge Base Article 941693 update not installed (WinMs08kb941693Update)

Microsoft Windows Knowledge Base Article 941693 update not installed (WinMs08kb941693Update)

Vuln ID:	41470
Risk Level:	High	WinMs08kb941693Update
Platforms:	Microsoft Windows Vista: SP1, Microsoft Windows Vista: SP1 x64, Microsoft Windows 2008: x64, Microsoft Windows 2008, Microsoft Windows 2008: Itanium, Microsoft Windows 2003 Server: x64, Microsoft Windows XP: SP2, Microsoft Windows XP: Professional x64, Microsoft Windows 2003 Server: SP1, Microsoft Windows 2003 Server: SP1 Itanium, Microsoft Windows 2003 Server: SP2, Microsoft Windows 2003 Server: SP2 Itanium, Microsoft Windows 2003 Server: SP2 x64, Microsoft Windows Vista: x64, Microsoft Windows XP: SP2 Professional x64, Microsoft Windows Vista, Microsoft Windows 2000: SP4
Description:	Microsoft Windows Knowledge Base Article 941693 update is not installed on the system, which could allow an attacker to exploit the following vulnerability: Microsoft Windows kernel could allow a local attacker to gain elevated privileges, caused by an improper validation of input passed from usermode to the kernel. By executing a malicious application on a vulnerable system, an attacker could exploit this vulnerability to execute arbitrary code and gain complete control of the system.
Remedy:	Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS08-025. See References.
False Positives:
False Negatives:
Required Permission:	Windows login
References:	Microsoft Security Bulletin MS08-025 Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693) http://www.microsoft.com/technet/security/bulletin/ms08-025.mspx IBM Internet Security Systems X-Force Database Microsoft Windows kernel usermode privilege escalation http://xforce.iss.net/xforce/xfdb/41469 ISS X-Force Microsoft Windows Knowledge Base Article 941693 update not installed http://www.iss.net/security_center/static/41470.php CVE CVE-2008-1084 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1084

Know Your Risks

Common Vulnerabilties & Exposures