The Lsass.exe process crashes if the CredGroup object is incorrectly dereferenced in Windows 7 SP1 or Windows Server 2008 R2 SP1

Applies to: Windows 7 Service Pack 1Windows Server 2008 R2 Service Pack 1

Symptoms


Assume that you run an application on a computer that is running Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 SP1. When the application calls the SpAcceptLsaModeContext function by using a CredGroup object, the Local Security Authority Subsystem Service (Lsass.exe) process crashes if the CredGroup object is incorrectly dereferenced.

Resolution


To resolve this issue, apply security update 3057154 .

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References


Learn about the terminology that Microsoft uses to describe software updates.