PT-2015-2950 · Microsoft · Windows 8.1+5
Published
2015-12-08
·
Updated
2019-05-15
·
CVE-2015-6133
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions 8 through 10, including Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511
Description
The issue is related to errors in loading libraries, which can be exploited by a local attacker to elevate privileges using a specially crafted application. This can allow an attacker to gain complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. Users with limited user rights may be less impacted than those operating with administrative rights.
Recommendations
For Windows 8, consider applying the recommended security update to resolve the issue.
For Windows 8.1, apply the security patch to fix the library loading vulnerability.
For Windows Server 2012 Gold and R2, update to the latest version that includes the security fix for library loading.
For Windows RT Gold and 8.1, install the available security update to mitigate the risk.
For Windows 10 Gold and 1511, apply the recommended security update to resolve the library loading issue.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Windows
Windows 10
Windows 8
Windows 8.1
Windows Rt
Windows Server 2012