PT-2015-2011 · Microsoft · Windows 10+5

Publicado 2015-09-08 · Atualizado 2019-05-14 · CVE-2015-2524

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8 through 10 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1

Description The issue is related to insufficient access control in certain functions of the Windows operating system. It allows a local attacker to elevate privileges using a specially crafted application. The vulnerability can be exploited by an attacker who has already logged on to the system, enabling them to bypass security checks and gain elevated privileges.

Recommendations For Windows 8, update to a version that properly constrains impersonation levels. For Windows 8.1, apply the necessary patches to enforce impersonation levels correctly. For Windows Server 2012 Gold and R2, restrict access to sensitive functions until a proper update is applied. For Windows RT Gold and 8.1, consider disabling unnecessary features that may be exploited to elevate privileges. For Windows 10, ensure that all security updates are applied to prevent exploitation of this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-11357

CVE-2015-2524

Produtos afetados

Windows

Windows 10

Windows 8

Windows 8.1

Windows Rt

Windows Server 2012

Referências · 8

• 🔥 https://exploit-db.com/exploits/38202 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-102 · Aviso do Fabricante
• http://securitytracker.com/id/1033494 · Nota
• http://technet.microsoft.com/security/bulletin/MS15-102 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2524 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-2524 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-11357 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/ms15-102 · Nota