PT-2015-2322 · Microsoft · Windows 10+7

Publicado 2015-10-14 · Atualizado 2019-05-15 · CVE-2015-2550

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 Windows 10

Description The issue is related to insufficient access restrictions to certain functions in the Windows kernel, allowing local users to gain privileges via a crafted application. This can enable an attacker to elevate their privileges.

Recommendations For Windows Vista SP2, update to a newer version to mitigate the risk. For Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk. For Windows 7 SP1, update to a newer version to mitigate the risk. For Windows 8, update to a newer version to mitigate the risk. For Windows 8.1, update to a newer version to mitigate the risk. For Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk. For Windows RT Gold and 8.1, update to a newer version to mitigate the risk. For Windows 10, update to a newer version to mitigate the risk.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-11687

CVE-2015-2550

Produtos afetados

Windows 10

Windows 7

Windows 8

Windows 8.1

Windows Rt

Windows Server 2008

Windows Server 2012

Windows Vista

Referências · 5

• https://bdu.fstec.ru/vul/2015-11687 · Nota de Segurança
• http://securitytracker.com/id/1033805 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-111 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/MS15-111 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2550 · Nota de Segurança