Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1643 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "NtCreateTransactionManager Type Confusion Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032113 - https://docs.microsoft.com/en-us/security-updates/se
ontainer: References: - http://www.securitytracker.com/id/1032113 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-038
CVE ID: CVE-2015-1644 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows MS-DOS Device Name Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73998 - http://www.securitytracker.com/id/1032113 - https://docs.microsoft.co
rences: - http://www.securityfocus.com/bid/73998 - http://www.securitytracker.com/id/1032113 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-038
CVE ID: CVE-2015-1645 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile (EMF) image, aka "EMF Processing Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-035 - http://www.securityfocus.com/archive/1/535272/100/0/threaded - http://packetstormsecurity.com/files/131457/Microsoft-Window
p://www.securityfocus.com/archive/1/535272/100/0/threaded - http://packetstormsecurity.com/files/131457/Microsoft-Windows-GDI-MRSETDIBITSTODEVICE-bPlay-EMF-Parsing-Memory-Corruption.html - http://www.securitytracker.com/id/1032110
CVE ID: CVE-2015-1646 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-039 - http://www.securitytracker.com/id/1032114
CVE ID: CVE-2015-1647 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual Machine Manager (VMM) in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service (VMM functionality loss) via a crafted application, aka "Windows Hyper-V DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032117 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-042
CVE ID: CVE-2015-1648 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled, allows remote attackers to obtain sensitive configuration-file information via a crafted request, aka "ASP.NET Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-041 - http://www.securitytracker.com/id/1032116
CVE ID: CVE-2015-1649 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps Server 2010 SP2 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032104 - https://docs.microsoft.com/en-us/security-updates/secu
tainer: References: - http://www.securitytracker.com/id/1032104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033
CVE ID: CVE-2015-1650 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/10321
Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033
CVE ID: CVE-2015-1651 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033
CVE ID: CVE-2015-1652 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1666. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73990 - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1653 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032111 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-036
CVE ID: CVE-2015-1654 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1655 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1656 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1657 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1658 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1706, CVE-2015-1711, CVE-2015-1717, and CVE-2015-1718. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032282 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043 - http://www.securityfocus.com/bid/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-043 - http://www.securityfocus.com/bid/74504
CVE ID: CVE-2015-1659 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1662 and CVE-2015-1665. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73994 - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1660 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1661 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - http://www.securityfocus.com/bid/74006 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1662 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1659 and CVE-2015-1665. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1663 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1664 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1665 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1659 and CVE-2015-1662. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74000 - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1666 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1652. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1667 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE ID: CVE-2015-1668 State: PUBLISHED Published: 2015-04-14T20:00:00 Last Updated: 2024-08-06T04:47:17.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032 - http://www.securityfocus.com/bid/74004
CVE ID: CVE-2015-1669 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-1670 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers to obtain sensitive information from process memory via a crafted OpenType font on a web site, aka "OpenType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044 - http://www.securityfocus.com/bid/74485 - http://www.securitytracker.com/id/1032281
CVE ID: CVE-2015-1671 State: PUBLISHED Published: 2015-05-13T10:00:00.000Z Last Updated: 2025-10-21T23:56:01.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
nt, aka "TrueType Font Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044 - http://www.securitytracker.com/id/1032281 - http://www.securityfocus.com/bid/74490
CVE ID: CVE-2015-1672 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted encrypted data in an XML document, aka ".NET XML Decryption Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032297 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048 - http://www.securityfocus.com/bid/74482
CVE ID: CVE-2015-1673 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74487 - http://www.securitytracker.com/id/1032297 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048
CVE ID: CVE-2015-1674 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address, which allows local users to bypass the KASLR protection mechanism, and consequently discover the cng.sys base address, via a crafted application, aka "Windows Kernel Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032292 - https://www.exploit-db.com/exploits/37052/ - http://www.s
ner: References: - http://www.securitytracker.com/id/1032292 - https://www.exploit-db.com/exploits/37052/ - http://www.securityfocus.com/bid/74488 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-052
CVE ID: CVE-2015-1675 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-1695, CVE-2015-1696, CVE-2015-1697, CVE-2015-1698, and CVE-2015-1699. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032280 - https://docs
dditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032280 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-045
CVE ID: CVE-2015-1676 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1677, CVE-2015-1678, CVE-2015-1679, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - http
, CVE-2015-1678, CVE-2015-1679, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051 - http://www.securitytracker.com/id/1032294 - http://www.securityfocus.com/bid/74483
CVE ID: CVE-2015-1677 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1678, CVE-2015-1679, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - http
, CVE-2015-1678, CVE-2015-1679, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051 - http://www.securitytracker.com/id/1032294 - http://www.securityfocus.com/bid/74494
CVE ID: CVE-2015-1678 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1677, CVE-2015-1679, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - http
, CVE-2015-1677, CVE-2015-1679, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74495 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051 - http://www.securitytracker.com/id/1032294
CVE ID: CVE-2015-1679 State: PUBLISHED Published: 2015-05-13T10:00:00 Last Updated: 2024-08-06T04:47:17.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1677, CVE-2015-1678, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - http
, CVE-2015-1677, CVE-2015-1678, and CVE-2015-1680. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051 - http://www.securitytracker.com/id/1032294 - http://www.securityfocus.com/bid/74496