Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9970 State: PUBLISHED Published: 2017-05-21T18:00:00 Last Updated: 2024-08-06T14:02:37.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: jasypt before 1.9.2 allows a timing attack against the password hash comparison. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040360 - https://access.redhat.com/errata/RHSA-2017:2809 - https://access.redhat.com/errata/RHSA-2017:2547 - https://access.redhat.com/errata/RHSA-2017:2810 - http://www.securitytracker.com/id/1039744 - https://access.redhat.com/errata/RHSA-2018:0294 - https://access.redhat.com/errata/RHSA-2017:2808 - https://access.redhat.com/errata/RHSA-2017:2546
rata/RHSA-2018:0294 - https://access.redhat.com/errata/RHSA-2017:2808 - https://access.redhat.com/errata/RHSA-2017:2546 - https://sourceforge.net/p/jasypt/code/668/ - https://access.redhat.com/errata/RHSA-2017:3141 - https://access.redhat.com/errata/RHSA-2017:2811
CVE ID: CVE-2014-9971 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T17:39:07.360Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Always-Incorrect Control Flow Implementation in TD-SCDMA Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9972 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T17:07:51.371Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: NULL Pointer Dereference in MMCP Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an out-of-memory condition. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9973 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T02:36:47.826Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9974 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T20:13:27.131Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Input Validation in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9975 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T00:56:37.240Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Improper Authentication in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9976 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T00:21:53.713Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input in 1x Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9977 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T03:12:22.033Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9978 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T21:57:45.408Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9979 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T18:43:26.239Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Use of Uninitialized Variable in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9980 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-16T23:26:57.332Z Vendors: Qualcomm, Inc. Products: All Qualcomm products Problem Types: Information Exposure in TrustZone Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - http://www.securityfocus.com/bid/99467
CVE ID: CVE-2014-9981 State: PUBLISHED Published: 2017-08-18T18:00:00Z Last Updated: 2024-09-17T01:16:49.761Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Validation of Array Index in Boot Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-07-01 - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9982 State: REJECTED Published: 2019-08-30T14:54:40 Last Updated: 2019-08-30T14:54:40 Description: No description available.
CVE ID: CVE-2014-9983 State: PUBLISHED Published: 2017-06-04T14:00:00 Last Updated: 2024-08-06T14:02:37.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774172
CVE ID: CVE-2014-9984 State: PUBLISHED Published: 2017-06-12T13:00:00 Last Updated: 2024-08-06T14:02:37.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=16695 - http://www.securityfocus.com/bid/99071 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=c44496df2f090a56d3bf75df930592dac6bba46f - http://seclists.o
://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=c44496df2f090a56d3bf75df930592dac6bba46f - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2014-9985 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:02:43.514Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: TOCTOU vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9986 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:51:39.771Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-Read in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 820A, in playready_licacq_process_response(), 'cbResponse' value is controlled by HLOS, and there is no validation on this length. If 'cbResponse' is
ess_response(), 'cbResponse' value is controlled by HLOS, and there is no validation on this length. If 'cbResponse' is too large, memory overread occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9987 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:31:27.278Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-read in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, a buffer over-read can occur in a DRM API. Additional Analyst Notes: - CVE Program Container: References: - https://source.a
ffer over-read can occur in a DRM API. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9988 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T18:23:24.724Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over Read in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear SD 820A, IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SD 450, and SD 850, lack of input validation for message length causes buffer over read in drm_app_encapsulate_save_keys.
D 450, and SD 850, lack of input validation for message length causes buffer over read in drm_app_encapsulate_save_keys. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9989 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:38:58.748Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Out-of-bounds array access may occur in the USB management module Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, and SD 450, if an incorrect endpoint number or direction is passed, an out of bounds array access may occur in the USB management module. Addi
rrect endpoint number or direction is passed, an out of bounds array access may occur in the USB management module. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9990 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:36:18.450Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Possible array out of bounds access in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, and SD 450, lack of input validation could lead to an out of bound array access. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com
n out of bound array access. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9991 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:29:51.896Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WIREDCONNECTIVITY Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, and SD 450, if a client or host sends more than 16k bytes of USB mass storage transfer, a buffer overflow occurs. Additional Analyst Notes: -
t or host sends more than 16k bytes of USB mass storage transfer, a buffer overflow occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9992 State: REJECTED Published: 2019-08-30T14:53:35 Last Updated: 2019-08-30T14:53:35 Description: No description available.
CVE ID: CVE-2014-9993 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:41:50.246Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in content protection manager Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 450, and SD 850, buffer overread vulnerability may occur while provisioning
SD 810, SD 820, SD 820A, SD 835, SD 845, SD 450, and SD 850, buffer overread vulnerability may occur while provisioning a content with a large message. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9994 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T17:58:49.692Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer Overflow to Buffer Overflow vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, lack of validation of input could cause a integer overflow that could subsequently lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9995 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:51:02.946Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer Overflow to Buffer Overflow. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in drmprov_cmd_verify_key(), the variable feature_name_length is not validated. There is a check for feature_name_len + filePathLen but there might be an integer wrap when checking feature_name_len + filePathLen. This leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04
w. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9996 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:48:21.077Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, while verifying provisioning, a buffer overflow can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9997 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:32:58.735Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over Read in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 450, SD 625, SD 650/52, SD 808, and SD 810, lack of input validation in PRDiagMaintenanceHandler can leads to buffer over read. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/201
read. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9998 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T04:29:30.323Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overflow vulnerability while processing firmware image signature Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while process
A9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2014-9999 State: REJECTED Published: 2015-01-13T11:00:00 Last Updated: 2016-04-26T12:57:01 Description: No description available.
CVE ID: CVE-2015-0001 State: PUBLISHED Published: 2015-01-13T22:00:00 Last Updated: 2024-08-06T03:55:27.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15
es: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99513 - http://secunia.com/advisories/62134 - http://www.securityfocus.com/bid/71927 - http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html
CVE ID: CVE-2015-0002 State: PUBLISHED Published: 2015-01-13T22:00:00 Last Updated: 2024-08-06T03:55:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with an administrative account, which allows local users to gain privileges by running AppCompatCache.exe with a crafted DLL file, aka MSRC ID 20544 or "Microsoft Application Compatibility Infrastructure Elevation of Privilege Vulnerability
DLL file, aka MSRC ID 20544 or "Microsoft Application Compatibility Infrastructure Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99523 - https://code.google.com/p/google-security-research/issues/detail?id=118 - http://www.securityfocus.com/bid/71972 - https://exchange.xforce.ibmcloud.com/vulnerabilities/99524 - http://www.zdnet.com/article/google-discloses-unpatched-windows-vulnerability/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-001 - http://twitter.com/sambowne/statuses/550384131683520512 - http://secunia.com/advisories/61277
CVE ID: CVE-2015-0003 State: PUBLISHED Published: 2015-02-11T02:00:00 Last Updated: 2024-08-06T03:55:27.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybullet
l Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/100430 - http://www.securityfocus.com/bid/72457