KLA10559 Privileges escalation in Microsoft products

Detect date:

04/14/2015

Severity:

Critical

Description:

Multiple improper impersonation levels handling were found in Microsoft products. By exploiting these vulnerabilities malicious users can gain privileges. These vulnerabilities can be exploited locally via a specially designed application.

Affected products:

Windows Server 2003 x86, x64, Itanium Service Pack 2
Windows Server 2003 R2 x86, x64 Service Pack 2
Windows Vista x86, x64 Service Pack 2
Windows Server 2008 x86, x64, Itanium Service Pack 2
Windows Server 2008 R2 x64, Itanium Service Pack 1
Windows 8 x86, x64
Windows 8.1 x86, x64
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

MS15-038
CVE-2015-1643
CVE-2015-1644

Impacts:

PE

Related products:

Microsoft Windows Vista

CVE-IDS:

CVE-2015-16437.2High
CVE-2015-16447.2High

Microsoft official advisories:

KB list:

3045999
3045685

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.