Use-After-Free Vulnerability in Microsoft Windows Kernel Drivers
CVE-2015-1722

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows Rt
Windows Server 2003
Vendor
CVE Published:
10 June 2015

Summary

This vulnerability exists in the kernel-mode drivers of various Microsoft Windows operating systems, allowing local users to execute a crafted application to gain elevated privileges. Specifically, the flaw relates to improper handling of bitmap objects leading to potential exploitation by attackers, enabling them to execute malicious code in the system's privileged context. Affected systems include legacy and modern versions of Windows, making this vulnerability a significant concern for system administrators.

References

https://www.exploit-db.com/exploits/38275/
exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/38265/
exploitx_refsource_EXPLOIT-DB
http://www.securitytracker.com/id/1032525
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.