Secunia

Description
Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.

1) An error exists within the #GP trap handler (nt!KiTrap0D), which can be exploited to execute arbitrary code with kernel privileges.

NOTE: 64-bit Microsoft Windows operating systems and Windows Server 2008 R2 for x64- and Itanium-based systems are not affected.

2) An error exists due to the Windows kernel not correctly resetting a pointer when freeing memory, which can be exploited to trigger a double-free condition.

Successful exploitation of this vulnerability allows arbitrary code execution with system level privileges.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Tavis Ormandy
2) The vendor credits Tavis Ormandy, Google Inc.

Changelog
Further details available in Customer Area

Original Advisory
Tavis Ormandy:
http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0346.html

Microsoft (KB979682):
http://www.microsoft.com/technet/security/advisory/979682.mspx

MS10-015 (KB977165):
http://www.microsoft.com/technet/security/Bulletin/MS10-015.mspx

Deep Links
Links available in Customer Area