FYI…

- http://www.securityfocus.com/brief/393
2006-12-26
"…A brief analysis posted by security firm Symantec*… labeled the flaw as a double-free vulnerability caused by the way the Windows operating system handles error messages to be displayed. The vulnerability in the Client Server Run-Time Subsystem affects Windows 2000 SP4, Windows Server 2003 SP1, Windows XP SP1, SP2 and Windows Vista, according to Microsoft. "Currently we have not observed any public exploitation or attack activity regarding this issue," Mike Reavey, security program manager for Microsoft's Security Response Center, said in a statement on the MSRC's blog**…"

* http://www.symantec.com/enterprise/securit…vulnerable.html

** http://blogs.technet.com/msrc/archive/2006…nerability.aspx

- http://secunia.com/advisories/23448/
Critical: Less critical
Impact: Privilege escalation
Where: Local system
Solution Status: Unpatched…

:huh: