CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Permissions Privileges and Access Controls
Summary: microsoft windows xp sp2 and sp3, windows server 2003 sp2, windows vista sp1 and sp2, windows server 2008 sp2 and r2, and windows 7 allow local users to gain privileges by leveraging access to a process with networkservice credentials, as demonstrated by tapi server, sql server, and iis processes, and related to the windows service isolation feature.  note: the vendor states that privilege escalation from networkservice to localsystem does not cross a "security boundary."
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-08-16
Last Modified Date: 2018-10-30