Description
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
References
- 35372 third-party-advisory
- oval:org.mitre.oval:def:6016 vdb-entry signature
- ADV-2009-1544 vdb-entry
- 54943 vdb-entry
- MS09-025 vendor-advisory
- 1022359 vdb-entry
- TA09-160A third-party-advisory