(MS11-010) Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687)

This security update addresses a vulnerability in the Microsoft Windows Client/Server Run-time Subsystem (CSRSS), which could allow elevation of privilege. The exploit works if an attacker logs on to a user's system and starts a specially crafted application that continues running after the attacker logs off in order to obtain the logon credentials of subsequent users. However, an attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. It cannot be exploited anonymously nor remotely. More specifically, this update addresses the vulnerability by correcting the manner in which user processes are terminated upon logoff.