Technical Information

Brief overview of the risk:
An elevation of privilege vulnerability exists in the Remote Access Service NDISTAPI driver.
Detailed Information on the risk:
The vulnerability is caused when the NDISTAPI driver improperly validates user-supplied input when passing data from user mode to the Windows kernel. A local attacker who successfully exploited this vulnerability could execute arbitrary code and take complete control of an affected system. The attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.Further information on this exploit is available at : MS11-062