12.14.2010 - MS10-099 - Important: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

Bulletin Severity Rating:Important - This security update addresses a privately reported vulnerability in the Routing and Remote Access NDProxy component of Microsoft Windows. This security update is rated Important for all supported editions of Windows XP and Windows Server 2003. All supported editions of Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are not affected by the vulnerability. The vulnerability could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The vulnerability could not be exploited remotely or by anonymous users. - View Microsoft Security Bulletin MS10-099 - View Microsoft Knowledge Base Article - 440591 - Visit Microsoft Corporation