PT-2015-1066 · Microsoft · Windows Rt+8
Publicado
2015-04-14
·
Atualizado
2019-05-14
·
CVE-2015-1643
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Microsoft Windows Server 2003 R2
Microsoft Windows Vista SP2
Microsoft Windows Server 2008 SP2 and R2 SP1
Microsoft Windows 7 SP1
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012 Gold and R2
Microsoft Windows RT Gold and 8.1
Description
The issue is related to the incorrect validation and enforcement of impersonation levels in Microsoft Windows, allowing an attacker to bypass security checks and gain elevated privileges. This could enable an attacker to acquire administrator credentials, install programs, view, change, or delete data, and create new accounts with full administrative rights. To exploit this issue, an attacker would first need to log on to the system.
Recommendations
For Microsoft Windows Server 2003 R2, apply the necessary patch to fix the issue.
For Microsoft Windows Vista SP2, apply the necessary patch to fix the issue.
For Microsoft Windows Server 2008 SP2 and R2 SP1, apply the necessary patch to fix the issue.
For Microsoft Windows 7 SP1, apply the necessary patch to fix the issue.
For Microsoft Windows 8, apply the necessary patch to fix the issue.
For Microsoft Windows 8.1, apply the necessary patch to fix the issue.
For Microsoft Windows Server 2012 Gold and R2, apply the necessary patch to fix the issue.
For Microsoft Windows RT Gold and 8.1, apply the necessary patch to fix the issue.
As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 7
Windows 8
Windows 8.1
Windows Rt
Windows Server 2003
Windows Server 2008
Windows Server 2012
Windows Vista