medium4.6Public exploit code
CVE-2015-1674
The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - 'CNG.SYS' Kernel Security Feature Bypass (MS15-052)2015-05-18 · local · windows
Impact
The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address, which allows local users to bypass the KASLR protection mechanism, and consequently discover the cng.sys base address, via a crafted application, aka "Windows Kernel Security Feature Bypass Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 8 | All versions |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2012 | All versions Version r2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/74488
- http://www.securitytracker.com/id/1032292
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-052
- https://www.exploit-db.com/exploits/37052/
- http://www.securityfocus.com/bid/74488
- http://www.securitytracker.com/id/1032292
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-052
- https://www.exploit-db.com/exploits/37052/