Vulnerability Details : CVE-2015-1701
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
Vulnerability category: Gain privilege
At least one public exploit which can be used to exploit this vulnerability exists!
CVE-2015-1701
is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:
Microsoft Win32k Privilege Escalation Vulnerability
CISA required action:
Apply updates per vendor instructions.
CISA description:
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
Added on
2022-03-03
Action due date
2022-03-24
Exploit prediction scoring system (EPSS) score for CVE-2015-1701
Probability of exploitation activity in the next 30 days: 0.53%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 74 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2015-1701
-
Windows ClientCopyImage Win32k Exploit
Disclosure Date : 2015-05-12exploit/windows/local/ms15_051_client_copy_imageThis module exploits improper object handling in the win32k.sys kernel mode driver. This module has been tested on vulnerable builds of Windows 7 x64 and x86, and Windows 2008 R2 SP1 x64. Authors: - Unknown - hfirefox - OJ Reeves - Spencer McIntyre
CVSS scores for CVE-2015-1701
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
[email protected] |
CWE ids for CVE-2015-1701
-
Assigned by: [email protected] (Primary)
References for CVE-2015-1701
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
-
https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html
-
http://twitter.com/symantec/statuses/590208710527549440
-
http://www.securityfocus.com/bid/74245
-
https://www.exploit-db.com/exploits/37049/
-
http://www.securitytracker.com/id/1032155
-
http://seclists.org/fulldisclosure/2020/May/34
-
https://www.exploit-db.com/exploits/37367/
Products affected by CVE-2015-1701
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:x64:*