Lucene search

K
cve[email protected]CVE-2015-0001
HistoryJan 13, 2015 - 10:59 p.m.

CVE-2015-0001

2015-01-1322:59:00
CWE-264
web.nvd.nist.gov
48
windows
error reporting
wer
microsoft
security
vulnerability
bypass
nvd
cve-2015-0001

6.3 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

15.6%

The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka “Windows Error Reporting Security Feature Bypass Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rtMatch-gold
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2012Match-gold
OR
microsoftwindows_server_2012Matchr2x64

6.3 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

15.6%