Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)

This host is missing a critical security update according to Microsoft Bulletin MS09-012.

- Microsoft Distributed Transaction Coordinator (MSDTC) transaction facility allowing the NetworkService token to be obtained and used when making an RPC call. - Windows Management Instrumentation (WMI) provider improperly isolating processes that run under the NetworkService or LocalService accounts. - RPCSS service improperly isolating processes that run under the NetworkService or LocalService accounts. - Windows placing incorrect access control lists (ACLs) on threads in the current ThreadPool.

Microsoft Windows 2K Service Pack 4 and prior. Microsoft Windows XP Service Pack 3 and prior. Microsoft Windows 2003 Service Pack 2 and prior. Microsoft Windows Vista Service Pack 1 and prior. Microsoft Windows Server 2008 Service Pack 1 and prior.

The vendor has released updates. Please see the references for more information.