Lucene search

K
cve[email protected]CVE-2015-0001
HistoryJan 13, 2015 - 10:59 p.m.

CVE-2015-0001

2015-01-1322:59:00
CWE-264
web.nvd.nist.gov
49
windows
error reporting
wer
microsoft
security
vulnerability
bypass
nvd
cve-2015-0001

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

16.0%

The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka “Windows Error Reporting Security Feature Bypass Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rtMatch-gold
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2012Match-gold
OR
microsoftwindows_server_2012Matchr2x64

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

16.0%