Microsoft Windows Kernel Security Feature Bypass Vulnerability (2644615)

  1. Network Vulnerabilities
  2. Windows : Microsoft Bulletins
  3. Microsoft Windows Kernel Security Feature Bypass Vulnerability (2644615)
Summary
This host is missing an important security update according to Microsoft Bulletin MS12-001.
Impact
Successful exploitation could allow attackers to execute arbitrary code by leveraging memory corruption vulnerabilities in Windows applications. Impact Level: System
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-001
Insight
The flaw is due to an error in the way the kernel (ntdll.dll) loads structured exception handling tables and allows bypassing the SafeSEH security mechanism. This facilitates easier exploitation of other vulnerabilities in affected applications to execute code.
Affected
Micorsoft Windows 7 Service Pack 1 and prior. Microsoft Windows 2003 Service Pack 2 and prior. Microsoft Windows Vista Service Pack 2 and prior. Microsoft Windows Server 2008 Service Pack 2 and prior.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities