CVE-2015-1643

HIGH · 7.2 CVSS Gepubliceerd: 14-04-2015 CWE-264

Beschrijving

Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "NtCreateTransactionManager Type Confusion Vulnerability."

Vendors

Microsoft

Affected products

Windows 7 Windows 8 Windows 8.1 Windows Rt Windows Rt 8.1 Windows Server 2003 Windows Server 2008 Windows Server 2012 Windows Vista

References

www.securitytracker.com
docs.microsoft.com