Microsoft Windows NDIS Elevation of Privilege Vulnerability

Last Update Date: 11 Nov 2015 16:48 Release Date: 11 Nov 2015 3815 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

An elevation of privilege vulnerability exists when NDIS fails to check the length of a buffer prior to copying memory into it. An attacker who successfully exploited this vulnerability could gain elevated privileges on a targeted system.

Impact

Elevation of Privilege

System / Technologies affected

Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows Server 2008 R2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS15-117

Vulnerability Identifier

CVE-2015-6098

Source

Microsoft