PT-2015-2011 · Microsoft · Windows 10+5

Published 2015-09-08 · Updated 2019-05-14 · CVE-2015-2524

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8 through 10 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1

Description The issue is related to insufficient access control in certain functions of the Windows operating system. It allows a local attacker to elevate privileges using a specially crafted application. The vulnerability can be exploited by an attacker who has already logged on to the system, enabling them to bypass security checks and gain elevated privileges.

Recommendations For Windows 8, update to a version that properly constrains impersonation levels. For Windows 8.1, apply the necessary patches to enforce impersonation levels correctly. For Windows Server 2012 Gold and R2, restrict access to sensitive functions until a proper update is applied. For Windows RT Gold and 8.1, consider disabling unnecessary features that may be exploited to elevate privileges. For Windows 10, ensure that all security updates are applied to prevent exploitation of this issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-11357

CVE-2015-2524

Affected Products

Windows

Windows 10

Windows 8

Windows 8.1

Windows Rt

Windows Server 2012

References · 8

• 🔥 https://exploit-db.com/exploits/38202 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-102 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2524 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-2524 · Security Note
• https://bdu.fstec.ru/vul/2015-11357 · Security Note
• http://securitytracker.com/id/1033494 · Note
• http://technet.microsoft.com/security/bulletin/MS15-102 · Note
• http://technet.microsoft.com/security/bulletin/ms15-102 · Note