Vulnerability in LSASS Allows Local Elevation of Privilege (MS08-002)

This important update resolves a privately reported vulnerability in Microsoft Windows Local Security Authority Subsystem Service (LSASS). The vulnerability could allow an attacker to run arbitrary code with elevated privileges. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

http://www.securiteam.com/windowsntf...TP022KN5G.html