Microsoft Kernel Security Feature Bypass Vulnerability
Last Update Date:
13 May 2015 14:37
Release Date:
13 May 2015
3584
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
A security feature bypass vulnerability exists when the Windows kernel fails to properly validate a memory address, allowing an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass. An attacker who successfully exploited this vulnerability can then retrieve the base address of cng.sys from a compromised process.
Impact
- Security Restriction Bypass
System / Technologies affected
- Microsoft Windows 8 and Windows 8.1
- Microsoft Windows RT and Windows RT 8.1
- Microsoft Windows Server 2012 and Windows Server 2012 R2
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS15-052
Vulnerability Identifier
Source
Related Link
Share with