This host is missing a critical security update according to Microsoft Bulletin MS11-010.

Successful exploitation could allow local attackers to obtain sensitive information or gain privileges. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/Bulletin/MS11-010.mspx

The flaw is caused by an error in the Client/Server Run-time Subsystem(CSRSS) when terminating a process when a user logs off, which could allow malicious users to monitor the actions of a user who subsequently logged on to the system, and collect useful information to try to further compromise the affected system.

Microsoft Windows XP Service Pack 3 and prior. Microsoft Windows 2003 Service Pack 2 and prior.

• http://support.microsoft.com/kb/2476687
• http://www.microsoft.com/technet/security/Bulletin/MS11-010.mspx
• http://www.vupen.com/english/advisories/2011/0323

---

Updated on 2015-03-25