Technical Information

Brief overview of the risk:
A privilege elevation vulnerability exists in Windows XP Service Pack 2 in the way that the Window Image Acquisition Service starts applications. This vulnerability could allow a logged on user to take complete control of the system.
Detailed Information on the risk:
The Microsoft Windows Image Acquisition (WIA) Service provides an API that enables graphics programs to obtain pictures from hardware devices such as image scanners and digital cameras. An unchecked buffer in the API can be overflowed by a user application, allowing code to be executed in a privileged context.Further information on this exploit is available at : MS07-007