MS16-031 - K7 Labs

<< Back

CVE Number	Vulnerability	Product	Severity	Date
MS16-031	Security Update for Microsoft Windows to Address Elevation of Privilege (3140410)	Windows Vista	Important	09-03-2016

Technical Information

Brief overview of the risk:
The vulnerability could allow elevation of privilege if an attacker is able to log on to a target system and run a specially crafted application.

Detailed Information on the risk:

An elevation of privilege vulnerability exists when Microsoft Windows fails to properly sanitize handles in memory. An attacker who successfully exploited the vulnerability could run arbitrary code as System.
To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application designed to elevate privileges.

Further information on this exploit is available at : MS16-031

Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Technical Information

Affected Software