First published: Tue Jan 08 2008(Updated: )
Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows XP | =sp2 | |
Microsoft Windows 2000 | =sp4 | |
Microsoft Windows 2003 Server | =sp1 | |
Microsoft Windows 2003 Server | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5352 has a high severity rating due to the potential privilege escalation it allows to local users.
To fix CVE-2007-5352, update your system to the latest service pack or security update recommended by Microsoft.
CVE-2007-5352 affects Microsoft Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1 and SP2.
CVE-2007-5352 is a local privilege escalation vulnerability in the Local Security Authority Subsystem Service (LSASS).
CVE-2007-5352 is not remotely exploitable as it requires local access to the system to perform the attack.