Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_nt | Microsoft | 3.5.1 (including) | 3.5.1 (including) |
| Windows_nt | Microsoft | 4.0 (including) | 4.0 (including) |
| Windows_nt | Microsoft | 4.0-sp1 (including) | 4.0-sp1 (including) |
| Windows_nt | Microsoft | 4.0-sp2 (including) | 4.0-sp2 (including) |
| Windows_nt | Microsoft | 4.0-sp3 (including) | 4.0-sp3 (including) |
| Windows_nt | Microsoft | 4.0-sp4 (including) | 4.0-sp4 (including) |