PT-2016-1395 · Microsoft · Windows Vista+7

B33F + 3 · Publicado 2016-03-08 · Atualizado 2025-12-09 · CVE-2016-0099

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511

Description The Secondary Logon Service in Microsoft Windows does not properly process request handles, allowing local users to gain privileges via a crafted application. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator, then install programs, view, change, or delete data, or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system.

Recommendations For Microsoft Windows versions Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511, consider disabling the Secondary Logon Service as a temporary workaround until a patch is available. Restrict access to the system to minimize the risk of exploitation. Avoid using crafted applications that could exploit the vulnerability in the Secondary Logon Service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Buffer Overflow

Enumeração de Fraquezas

CWE-264

CWE-120

Identificadores relacionados

BDU:2016-00694

CVE-2016-0099

Produtos afetados

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2012

Windows Vista

Referências · 25

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms16_032_secondary_logon_handle_privesc.rb · Exploit
• 🔥 https://github.com/zcgonvh/MS16-032 · Exploit
• 🔥 https://exploit-db.com/exploits/39719 · Exploit
• 🔥 https://exploit-db.com/exploits/39574 · Exploit
• 🔥 https://exploit-db.com/exploits/39809 · Exploit
• 🔥 https://exploit-db.com/exploits/40107 · Exploit
• https://t.me/aptreports/24375 · Publicação no Telegram
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0099 · Nota
• http://securityfocus.com/bid/84034 · Nota
• https://osv.dev/vulnerability/CVE-2016-0099 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0099 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-0099 · Nota de Segurança
• https://t.me/aptreports/24372 · Publicação no Telegram
• http://technet.microsoft.com/security/bulletin/MS16-032 · Nota
• https://bdu.fstec.ru/vul/2016-00694 · Nota de Segurança