Overview
The Microsoft Windows Korean Input Method Editor (IME) contains a privilege escalation vulnerability.
Description
According to Microsoft: An IME is a program that allows computer users to enter complex characters and symbols, such as Japanese characters, using a standard keyboard. |
Impact
An attacker may be able to gain SYSTEM privileges on a vulnerable system. |
Solution
Apply an Update |
|
Vendor Information
CVSS Metrics
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
References
Acknowledgements
This vulnerability was reported in Microsoft Security Bulletin MS06-009. Microsoft credits Ryan Lee of VMCraft Inc.with providing information regarding this issue.
This document was written by Jeff Gennari.
Other Information
CVE IDs: | CVE-2006-0008 |
Severity Metric: | 6.38 |
Date Public: | 2006-02-14 |
Date First Published: | 2006-02-14 |
Date Last Updated: | 2006-02-22 14:17 UTC |
Document Revision: | 14 |