Encyclopedia

MS09-058

 
Threat LevelLow threatDamageHighDistributionNot widespread
Common name:MS09-058
Technical name:MS09-058
Threat level:Medium
Alias:Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege, Vulnerabilidades en el kernel de Windows podrían permitir la elevación de privilegios
Type:Vulnerability
Effects:  

It is a group of important vulnerabilities in Windows Kernel on Windows Server 2008/Vista/2003/XP/2000 computers, which allows hackers to gain local privilege escalation and to launch denial of service attacks.

Affected platforms:

Windows 2003/XP/2000

First detected on:Oct. 14, 2009
Detection updated on:Oct. 16, 2009
StatisticsNo

Brief Description 

    

MS09-058 is not categorized as virus, worm, Trojan or backdoor. It is a group of important vulnerabilities in the Windows Kernel on Windows Server 2008/Vista/2003/XP/2000 computers, which allows to gain local privilege escalation and to launch denial of service attacks.

The kernel is the core of the operating system and provides basic services for all other parts of the operating system.

If exploited successfully, MS09-058 allows to gain unauthorized privileges on a computer or network. An example of privilege elevation would be an unprivileged user who could manage to be added to the Administrator's group. In such case, the hacker could take complete control of the system: create, modify or delete files, install programs, create new user accounts, etc. It could also cause the system to stop responding and restart.

MS09-058 is usually exploited by running a specially crafted program in the vulnerable computer. In order to do so, a hacker must be able to log on locally to the system.

 

If you have a Windows Server 2008/Vista/2003/XP/2000 computer, it is recommended to download and apply the security patch for this vulnerability. Click here to access the web page for downloading the patch.

Bear in mind that this security patch replaces a previous one, called MS08-064.

Last updated:  16/10/2009 

Virus News

3/10/09.-More than 10 Million Worldwide Were Actively Exposed to Identity Theft in 2008

3/5/09.-Cyber-crooks manipulate Internet searches to sell fake antivirus products

3/2/09.-VideoPlay adware infections grew 400% in February through malicious use of Web 2.0 pages

[+ Noticias]