A vulnerability that affects four of Microsoft\u2019s operating systems, including Vista, doesn\u2019t appear to pose a great risk, according to one security vendor.Microsoft\u2019s security blog said proof-of-concept code has been publicly released that targets the Client-Server Runtime Subsystem (CSRSS), which performs functions such as launching and closing applications.A user could launch malicious code within the CSRSS that would elevate one\u2019s privileges on a computer, such as going from an ordinary user to an administrator, said Thomas Kristensen, chief technology officer for Secunia in Denmark.To execute the attack, however, a user would already have to be logged onto a machine or have gained access to the network some other way, Kristensen said. Because of this, Secunia rated the vulnerability as "less critical," he said.Still, the flaw could potentially let an attacker place a rootkit on a machine and scrub any trace of tampering with the machine, Kristensen said."It\u2019s still a significant vulnerability which administrators should pay a whole lot of attention to," he said.Microsoft said it has not heard of attacks using the vulnerability, although it was investigating the impact. The affected systems are Windows 2000 SP4, Windows Server SP1, Windows XP SP2 and Vista, Microsoft said. \u2014 Jeremy Kirk, IDG News Service (London Bureau)Related Link:Microsoft Windows Vista: The OS Has LandedCheck out our CIO News Alerts and Tech Informer pages for more updated news coverage.