=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2008/VULN436
_____________________________________________________________________

DATE                      : 15/10/2008

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Windows XP, Windows Server 2003, Windows
                             Vista, Windows Server 2008 running
                             Virtual Address Descriptor.

======================================================================
KB956841
http://www.microsoft.com/technet/security/bulletin/ms08-064.mspx
______________________________________________________________________

Microsoft Security Bulletin MS08-064 - Important

Vulnerability in Virtual Address Descriptor Manipulation Could Allow
Elevation of Privilege (956841)

   Published: October 14, 2008

   Version: 1.0

General Information

Executive Summary

   This security update resolves a privately reported vulnerability in
   Virtual Address Descriptor. The vulnerability could allow elevation of
   privilege if a user runs a specially crafted application. An
   authenticated attacker who successfully exploited this vulnerability
   could gain elevation of privilege on an affected system. An attacker
   could then install programs; view, change, or delete data; or create
   new accounts with full administrative rights.

   This security update is rated Important for all supported editions of
   Windows XP, Windows Server 2003, Windows Vista, and Windows Server
   2008. For more information, see the subsection, Affected and
   Non-Affected Software, in this section.

   The security update addresses the vulnerability by modifying the way
   that Virtual Address Descriptor handles memory allocation variables.

   Recommendation. Microsoft recommends that customers apply the update
   at the earliest opportunity.

Affected Software

   Windows XP Service Pack 2

   Windows XP Service Pack 3

   Windows XP Professional x64 Edition

   Windows XP Professional x64 Edition Service Pack 2

   Windows Server 2003 Service Pack 1

   Windows Server 2003 Service Pack 2

   Windows Server 2003 x64 Edition

   Windows Server 2003 x64 Edition Service Pack 2

   Windows Server 2003 with SP1 for Itanium-based Systems

   Windows Server 2003 with SP2 for Itanium-based Systems

   Windows Vista

   Windows Vista Service Pack 1

   Windows Vista x64 Edition

   Windows Vista x64 Edition Service Pack 1

   Windows Server 2008 for 32-bit Systems

   Windows Server 2008 for x64-based Systems

   Windows Server 2008 for Itanium-based Systems

Vulnerability Information

Virtual Address Descriptor Elevation of Privilege Vulnerability -
CVE-2008-4036

   An elevation of privilege vulnerability exists in the way that Memory
   Manager handles memory allocation and Virtual Address Descriptors
   (VADs). The vulnerability could allow elevation of privilege if an
   authenticated attacker runs a specially crafted program on an affected
   system. An attacker who successfully exploited this vulnerability
   could gain elevation of privilege on an affected system. An attacker
   could then install programs; view, change, or delete data; or create
   new accounts with full administrative rights.

Workarounds for Virtual Address Descriptor Elevation of Privilege
Vulnerability - CVE-2008-4036

   Microsoft has not identified any workarounds for this vulnerability.

======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 151 bd de l'Hopital   | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================