PT-2015-5737 · Microsoft · Malicious Software Removal Tool

Publicado 2015-07-20 · Atualizado 2021-08-09 · CVE-2015-2418

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Malicious Software Removal Tool (MSRT) versions prior to 5.26

Description A race condition issue exists, allowing local users to gain privileges via a crafted DLL.

Recommendations For versions prior to 5.26, update to version 5.26 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2015-2418

Produtos afetados

Malicious Software Removal Tool

Referências · 4

• http://packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html · Nota
• http://securitytracker.com/id/1032901 · Nota
• https://technet.microsoft.com/library/security/3074162 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2418 · Nota de Segurança