Skip to main content

Microsoft Kernel Security Feature Bypass Vulnerability

Last Update Date: 13 May 2015 14:37 Release Date: 13 May 2015 3584 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

A security feature bypass vulnerability exists when the Windows kernel fails to properly validate a memory address, allowing an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass. An attacker who successfully exploited this vulnerability can then retrieve the base address of cng.sys from a compromised process.


Impact

  • Security Restriction Bypass

System / Technologies affected

  • Microsoft Windows 8 and Windows 8.1
  • Microsoft Windows RT and Windows RT 8.1
  • Microsoft Windows Server 2012 and Windows Server 2012 R2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link