JSON View XML View

Key Value
MTID M115475
Title Microsoft Windows NtSetWindowLongPtr Privilege Escalation
Description A vulnerability in some versions of Microsoft Windows could lead to privilege escalation.
Observation A vulnerability in some versions of Microsoft Windows could lead to privilege escalation.

The flaw lies in NtSetWindowLongPtr(). Successful exploitation could allow a local user to gain elevated privileges.
Recommendation McAfee is currently unaware of a vendor-supplied patch or update (2016-11-01).
Vendor Microsoft
Attack Vector Authenticated locally logged on user with limited privileges
Importance 9
Impact 10.00084536000
Threat Score 6.56
Labels
Zero-Day
References
MTIDM115475
CPEs
cpe:/o:microsoft:windows_7:sp1
cpe:/o:microsoft:windows_7::sp1:x64
cpe:/o:microsoft:windows_8.1
cpe:/o:microsoft:windows_8.1:::x64
cpe:/o:microsoft:windows_rt:8.1
cpe:/o:microsoft:windows_10
cpe:/o:microsoft:windows_10:::x64
cpe:/o:microsoft:windows:10_version_1511:10_version_1511
cpe:/o:microsoft:windows:10_version_1511_x64:10_version_1511_x64
cpe:/a:microsoft:windows:10_version_1607
cpe:/a:microsoft:windows:10_version_1607::x64
Created At 2016-10-31 00:00:00 UTC
Updated At 2016-11-03 10:38:32 UTC

Back