CVE-2007-5352

Credit:
The information has been provided by Microsoft Product Security.
The original article can be found at: http://www.microsoft.com/technet/security/bulletin/ms08-002.mspx

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2007-5352

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Affected Software
* Microsoft Windows 2000 Service Pack 4 - Local Elevation of privilege - Important - None
* Windows XP Service Pack 2 - Local Elevation of privilege - Important - None
* Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2 - Local Elevation of privilege - Important - None
* Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2 - Local Elevation of privilege - Important - None
* Windows Server 2003 x64 Edition and Windows 2003 Server x64 Edition Service Pack 2 - Local Elevation of privilege - Important - None
* Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium based Systems - Local Elevation of privilege - Important - None

Non-Affected Software
* Windows Vista
* Windows Vista x64 Edition

LSASS Bypass Vulnerability - CVE-2007-5352
An elevation of privilege vulnerability exists in the Microsoft Windows Local Security Authority Subsystem Service (LSASS) due to its improper handling of local procedure call (LPC) requests. The vulnerability could allow an attacker to run code with elevated privileges. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

CVE Information:
CVE-2007-5352