PT-2015-5737 · Microsoft · Malicious Software Removal Tool

Published 2015-07-20 · Updated 2021-08-09 · CVE-2015-2418

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Malicious Software Removal Tool (MSRT) versions prior to 5.26

Description A race condition issue exists, allowing local users to gain privileges via a crafted DLL.

Recommendations For versions prior to 5.26, update to version 5.26 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2015-2418

Affected Products

Malicious Software Removal Tool

References · 4

• https://technet.microsoft.com/library/security/3074162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2418 · Security Note
• http://packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html · Note
• http://securitytracker.com/id/1032901 · Note