[Trend]One Bit To Rule A System: Analyzing CVE-2016-7255 Exploit In The Wild

[igor51]

One Bit To Rule A System: Analyzing CVE-2016-7255 Exploit In The Wild

Recently, Google researchers discovered a local privilege escalation vulnerability in Windows which was being used in zero-day attacks, including those carried out by the Pawn Storm espionage group. This is an easily exploitable vulnerability which can be found in all supported versions of Windows, from Windows 7 to Windows 10. By changing one bit, the attacker can elevate the privileges of a thread, giving administrator access to a process that would not have it under normal circumstances.

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

One Bit To Rule A System: Analyzing CVE-2016-7255 Exploit In The Wild

Source: One Bit To Rule A System: Analyzing CVE-2016-7255 Exploit In The Wild