CVE ID | CVE-2015-0003 |
CVSS SCORE | 6.2, AV:L/AC:H/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
Microsoft |
AFFECTED PRODUCTS |
Windows |
VULNERABILITY DETAILS |
The specific flaw exists within the handling of the WM_SYSTIMER message. By malforming the window handle in the message, an attacker is able to cause the kernel to write to a controlled address. An attacker could leverage this to execute arbitrary code in the context of the System. |
ADDITIONAL DETAILS |
Microsoft has issued an update to correct this vulnerability. More details can be found at:
https://technet.microsoft.com/library/security/MS15-010 |
DISCLOSURE TIMELINE |
|
CREDIT | Marcin Wiazowski |