PT-2015-5750 · Microsoft · Windows

Published 2015-08-11 · Updated 2019-05-14 · CVE-2015-2454

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description A security feature bypass issue exists due to the kernel-mode driver's failure to properly validate and enforce impersonation levels. This allows local users to gain privileges via a crafted application. An attacker who successfully exploits this issue could bypass impersonation-level security and gain elevated privileges on a targeted system. The issue by itself does not allow arbitrary code execution, but it could be used in conjunction with another issue. To exploit this, an attacker would have to log on to an affected system.

Recommendations For Microsoft Windows versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-2454

ZDI-15-386

Affected Products

Windows

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2454 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2454 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-386 · Security Note
• http://securitytracker.com/id/1033238 · Note
• http://technet.microsoft.com/security/bulletin/ms15-080 · Note