Lucene search

K
cve[email protected]CVE-2015-0095
HistoryMar 11, 2015 - 10:59 a.m.

CVE-2015-0095

2015-03-1110:59:00
CWE-476
web.nvd.nist.gov
27
cve-2015-0095
microsoft
windows
kernel
memory disclosure
vulnerability
nvd
aslr
denial of service

6.2 Medium

AI Score

Confidence

Low

5.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:P/I:N/A:C

0.0004 Low

EPSS

Percentile

8.8%

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service (NULL pointer dereference and blue screen), or obtain sensitive information from kernel memory and possibly bypass the ASLR protection mechanism, via a crafted application, aka “Microsoft Windows Kernel Memory Disclosure Vulnerability.”

6.2 Medium

AI Score

Confidence

Low

5.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:P/I:N/A:C

0.0004 Low

EPSS

Percentile

8.8%