MS15-051: Vulnerabilities in Windows kernel-mode drivers could allow Elevation of Privilege

by CIRT Team

The more severe of these vulnerabilities could allow elevation of privilege if an attacker logs on locally and runs arbitrary code in kernel mode. An attacker could then install programs, view, change or delete data or create new accounts with full user rights.

Mitigation: Microsoft has released patches for Windows Platform.

Reference URL’s:

• http://www.cvedetails.com/cve/cve-2015-1676
• http://www.cvedetails.com/cve/cve-2015-1677
• http://www.cvedetails.com/cve/cve-2015-1678
• http://www.cvedetails.com/cve/cve-2015-1679
• http://www.cvedetails.com/cve/cve-2015-1680
• http://www.cvedetails.com/cve/cve-2015-1701
• https://technet.microsoft.com/library/security/MS15-051
• https://support.microsoft.com/en-us/help/3057191/ms15-051-vulnerabilities-in-windows-kernel-mode-drivers-could-allow-information-disclosure-may-12,-2015

CIRT Team