ms13-019

MS13-019 is a Microsoft security bulletin addressing a vulnerability in the Windows Client/Server Run-time Subsystem (CSRSS) that could allow elevation of privilege. The vulnerability is rated Important and was publicly disclosed prior to the bulletin's release on February 12, 2013. An attacker must have valid logon credentials and be able to log on locally to exploit this flaw by running a specially crafted application. The security update resolves the issue and is available through Microsoft's support channels. This tag covers discussions and information about the MS13-019 bulletin, including the associated Knowledge Base article KB2790113.