The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka "Windows Kernel Symbolic Link Creation Vulnerability."
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7130
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021
http://www.us-cert.gov/cas/techalerts/TA10-103A.html