MS09-012 - Important: Vulnerabilities in Windows Could Allow Elevation of Privilege (959454) - Version:1.1

[Steve]

Severity Rating: Important - Revision Note: V1.1 (April 15, 2009): Corrected the FAQ for the Windows Thread Pool ACL Weakness Vulnerability (CVE-2009-0080) to remove an erroneous "What does the update do" entry. This is an informational change only. Summary: This security update resolves four publicly disclosed vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker is allowed to log on to the system and then run a specially crafted application. The attacker must be able to run code on the local machine in order to exploit this vulnerability. An attacker who successfully exploited any of these vulnerabilities could take complete control over the affected system.

More...