Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le mai 22, 2015, 14:00:46

Titre: [Trend]Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks
Posté par: igor51 le mai 22, 2015, 14:00:46
Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks

Our analysis of the win32k.sys vulnerability used in a recent targeted attack reveals that it opens up an easy way to bypass the sandbox, making it a bigger threat than originally thought. As mentioned in Microsoft security bulletin MS15-051, CVE-2015-1701 is an elevation of privilege vulnerability that exists when the Win32k.sys kernel-mode driver improperly handles […]

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks


Source: Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/RuzGqW0kQdY/)