Description: This important update resolves a privately reported vulnerability in Internet Information Services (IIS). A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Update type: Important

Release date: February 12, 2008

Applies to: All

Knowledge base: support.microsoft.com/kb/942831

Download link: 32-bit | 64-bit

Comments: Windows Vista Service Pack 1 is not effected by this vulnerability. Here are the specifics on the vulnerabilities covered by this update:

• File Change Notification Vulnerability - CVE-2008-0074