PT-2015-3408 · Microsoft · Windows

Henry Li · Published 2015-01-13 · Updated 2025-04-04 · CVE-2015-0016

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to a directory traversal vulnerability in the TS WebProxy component, which allows remote attackers to gain privileges via a crafted pathname in an executable file. This can lead to a transition from Low Integrity to Medium Integrity. The vulnerability is associated with insufficient checking of the pathname to a directory with restricted access.

Recommendations For Microsoft Windows versions prior to the fixed version, consider disabling the TS WebProxy component until a patch is available. Restrict access to the TS WebProxy component to minimize the risk of exploitation. Avoid using crafted pathnames in executable files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2021-04946

CVE-2015-0016

Affected Products

Windows

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_004_tswbproxy.rb · Exploit
• 🔥 http://exploit-db.com/exploits/35983 · Exploit
• 🔥 http://packetstormsecurity.com/files/130201/MS15-004-Microsoft-Remote-Desktop-Services-Web-Proxy-IE-Sandbox-Escape.html · Exploit
• 🔥 http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox · Exploit
• 🔥 https://exploit-db.com/exploits/35983 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-0016 · Security Note
• https://bdu.fstec.ru/vul/2021-04946 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-004 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99515 · Note
• http://securityfocus.com/bid/71965 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99516 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cvenotify/117905 · Telegram Post
• http://securitytracker.com/id/1031524 · Note
• http://secunia.com/advisories/62076 · Note