Mateusz J00Ru Jurczyk

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT **Description** The issue arises from the improper handling of objects in memory by the DirectX graphics kernel subsystem (dxgkrnl.sys) in the kernel-mode drivers. This allows local users to gain privileges via a crafted application. **Recommendations** For Microsoft Windows Vista SP2, update the DirectX graphics kernel subsystem to a patched version. For Microsoft Windows Server 2008 SP2 and R2 SP1, update the DirectX graphics kernel subsystem to a patched version. For Microsoft Windows 7 SP1, update the DirectX graphics kernel subsystem to a patched version. For Microsoft Windows 8, update the DirectX graphics kernel subsystem to a patched version. For Microsoft Windows Server 2012, update the DirectX graphics kernel subsystem to a patched version. For Microsoft Windows RT, update the DirectX graphics kernel subsystem to a patched version.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT **Description** The issue arises from incorrect handling of objects in memory by the Windows kernel, allowing local users to gain privileges via a crafted application. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2003 version SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Vista version SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, update to a newer version that includes the fix for this issue. For Microsoft Windows 7 versions Gold through SP1, update to a newer version that includes the fix for this issue. For Microsoft Windows 8, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2012, update to a newer version that includes the fix for this issue. For Microsoft Windows RT, update to a newer version that includes the fix for this issue.