(MS15-004) Vulnerability in Windows Components Could Allow Elevation of Privilege (3025421)

  Severity: HIGH
  Advisory Date: AUG 12, 2015

  DESCRIPTION

This security update addresses a privately reported vulnerability in Microsoft Windows. Once successfully exploited, this vulnerability could allow elevation of privilege if an attacker convinces a user to run a specially crafted application. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Windows Vista x64 Edition Service Pack 2 (with Remote Desktop Client 7.0 installed)
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.1 installed)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.0 installed)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.1 installed)
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  • Windows 8 for 32-bit Systems
  • Windows 8 for x64-based Systems
  • Windows Vista Service Pack 2 (with Remote Desktop Client 7.0 installed)
  • Windows 7 for 32-bit Systems Service Pack 1 (with Remote Desktop Client 8.0 installed)
  • Windows 7 for 32-bit Systems Service Pack 1 (with Remote Desktop Client 8.1 installed)
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1 (with Remote Desktop Client 8.0 installed)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows 8.1 for 32-bit Systems
  • Windows 8.1 for x64-based Systems
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows RT[1]
  • Windows RT 8.1[1]
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2 (Server Core installation)

Featured Stories