Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)

  1. Network Vulnerabilities
  2. Windows : Microsoft Bulletins
  3. Microsoft Windows Prtition Manager Privilege Elevation Vulnerability (2690533)
Summary
This host is missing an important security update according to Microsoft Bulletin MS12-033.
Impact
Successful exploitation could allow attackers to gain escalated privileges. Impact Level: System
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-033
Insight
The flaw is due to the way Windows Partition Manager (partmgr.sys) allocates objects in memory, when two or more processes or threads call Plug and Play (PnP) Configuration Manager functions at the same time.
Affected
Microsoft Windows 7 Service Pack 1 and prior Microsoft Windows Vista Service Pack 2 and prior Microsoft Windows Server 2008 Service Pack 2 and prior Microsoft Windows Server 2008 R2 Service Pack 1 and prior
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities