MS11-014 - Important : Vulnerability in Local Security Authority Subsystem Service Could Allow Local


Extraordinary Robot
News Feed
Severity Rating: Important
Revision Note: V1.1 (April 28, 2011): Added a link to Microsoft Knowledge Base Article 2478960 under Known Issues in the Executive Summary.
Summary: This security update resolves a privately reported vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows XP and Windows Server 2003. This security update is rated Important for all supported editions of these operating systems. For more information, see the subsection, Affected and Non-Affected Software, in this section. The vulnerability could allow elevation of privilege if an attacker logs on to a system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The vulnerability could not be exploited remotely or by anonymous users.


This website is not affiliated, owned, or endorsed by Microsoft Corporation. It is a member of the Microsoft Partner Program.