CVE-2015-2478

HIGH · 7.2 CVSS Gepubliceerd: 11-11-2015 CWE-264

Beschrijving

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application that triggers a Winsock call referencing an invalid address, aka "Winsock Elevation of Privilege Vulnerability."

Vendors

Microsoft

Affected products

Windows 10 Windows 7 Windows 8 Windows 8.1 Windows Rt Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Vista

References

www.securitytracker.com
docs.microsoft.com