MS15-004：Windows コンポーネントの脆弱性により、特権が昇格される (3025421)
2015年8月12日
危険度: : 高
概要
This security update addresses a privately reported vulnerability in Microsoft Windows. Once successfully exploited, this vulnerability could allow elevation of privilege if an attacker convinces a user to run a specially crafted application. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
トレンドマイクロの対策
詳しい情報については以下のサイトをご参照ください。
対応方法
影響を受けるソフトウェア
- Windows Vista x64 Edition Service Pack 2 (with Remote Desktop Client 7.0 installed)
- Windows 7 for 32-bit Systems Service Pack 1
- Windows 7 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.1 installed)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.0 installed)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.1 installed)
- Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
- Windows 8 for 32-bit Systems
- Windows 8 for x64-based Systems
- Windows Vista Service Pack 2 (with Remote Desktop Client 7.0 installed)
- Windows 7 for 32-bit Systems Service Pack 1 (with Remote Desktop Client 8.0 installed)
- Windows 7 for 32-bit Systems Service Pack 1 (with Remote Desktop Client 8.1 installed)
- Windows 7 for x64-based Systems Service Pack 1
- Windows 7 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.0 installed)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Windows 8.1 for 32-bit Systems
- Windows 8.1 for x64-based Systems
- Windows Server 2012
- Windows Server 2012 R2
- Windows RT[1]
- Windows RT 8.1[1]
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2 (Server Core installation)