Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via...
Date: 2015-02
Affected: microsoft/windows_8.1, microsoft/windows_rt_8.1, microsoft/windows_server_2012
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2015-0058
CWE: CWE-415
CVSS: 7.2 ()

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."


Mitigations:

Architectural layers (MAESTRO):