PT-2015-5749 · Microsoft · Windows Rt+7

Publicado 2015-08-11 · Atualizado 2019-05-15 · CVE-2015-2453

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1

Description An elevation of privilege issue exists in the Client/Server Run-time Subsystem (CSRSS) due to improper process termination when a user logs off. This allows a local attacker to run code that monitors subsequent users' actions, potentially disclosing sensitive information, including logon credentials. The attacker could use this information to further compromise the system, and if an administrative user logs on, the attacker could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full system rights.

Recommendations For Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-2453

Produtos afetados

Windows

Windows 7

Windows 8

Windows 8.1

Windows Rt

Windows Server 2008

Windows Server 2012

Windows Vista

Referências · 5

• http://securitytracker.com/id/1033238 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2453 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/ms15-080 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2453 · Nota de Segurança