CVE-2009-2653

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 versions prior to SP1

Description The issue allows local administrators to bypass unspecified security software and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. The vendor disputes the significance of this report, stating that the Administrator to SYSTEM escalation is not a security boundary they defend.

Recommendations For Microsoft Windows XP versions SP2 through SP3, there is no information about a newer version that contains a fix for this issue. For Microsoft Windows Server 2003 versions prior to SP1, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the NtUserConsoleControl function in win32k.sys to minimize the risk of exploitation.