MS15-102 - K7 Labs

<< Back

CVE Number	Vulnerability	Product	Severity	Date
MS15-102	Vulnerabilities in Windows Task Management Could Allow Elevation of Privilege (3089657)	Windows Vista	Important	09-09-2015

Technical Information

Brief overview of the risk:
An elevation of privilege vulnerability exists when Microsoft Windows fails to properly validate and enforce impersonation levels. An attacker who successfully exploited this vulnerability could bypass impersonation-level security checks and gain elevated privileges on a targeted system.

Detailed Information on the risk:

To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application designed to increase privileges. The security update addresses the vulnerability by correcting how Windows validates impersonation events.

Further information on this exploit is available at : MS15-102

Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012 R2
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems

Technical Information

Affected Software