[Trend]Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks

[igor51]

Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks

Our analysis of the win32k.sys vulnerability used in a recent targeted attack reveals that it opens up an easy way to bypass the sandbox, making it a bigger threat than originally thought. As mentioned in Microsoft security bulletin MS15-051, CVE-2015-1701 is an elevation of privilege vulnerability that exists when the Win32k.sys kernel-mode driver improperly handles […]

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks

Source: Exploring CVE-2015-1701 ? A Win32k Elevation of Privilege Vulnerability Used in Targeted Attacks