The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 when a Chinese Japanese or Korean locale is enabled does not properly allocate memory for transactions which allows local users to gain privileges via a crafted application aka \CSRSS Local Elevation of Privilege Vulnerability.\