CVE-1999-0496 | Microsoft Windows NT 4.0 NtOpenProcessToken GetAdmin access control (Q146965 / XFDB-286)

A vulnerability marked as critical has been reported in Microsoft Windows NT 4.0. Affected is an unknown function of the component NtOpenProcessToken. Performing a manipulation results in improper access controls (GetAdmin).

This vulnerability is known as CVE-1999-0496. Attacking locally is a requirement. Furthermore, an exploit is available. Due to its background and reception, this vulnerability has an historic impact.

It is suggested to upgrade the affected component.