Microsoft Security Essentials Local Privilege Escalation Vulnerability

Release date:
Updated on:

Affected Systems:
Microsoft Security Essentials
Description:
--------------------------------------------------------------------------------
Bugtraq id: 59645
 
Microsoft Security Essential (Microsoft Security Software) is a new and free anti-malware product launched by the Microsoft Security Center for your computer.
 
Microsoft Security Essentials has the Local Privilege Escalation Vulnerability. Attackers can exploit this vulnerability to execute arbitrary code in the context of the LocalSystem account. This vulnerability is caused by insufficient pathname verification when parsing a special file.
 

<* Source: Stefan Kanthak

Link: http://xforce.iss.net/xforce/xfdb/84011
Http://technet.microsoft.com/en-us/security/bulletin/ms13-034
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Microsoft
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://windows.microsoft.com/zh-cn/windows/security-essentials-download