CVE-2015-6128 - Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."

Back Back to CVE browser

HIGH

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."

Published Dec 9, 2015

7.2

HIGH

CVSS 2.0

EPSS 81.89%

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

http://www.securityfocus.com/bid/78612
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1034338
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-132
vendor-advisoryx_refsource_MS
https://www.exploit-db.com/exploits/38918/
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/78612		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1034338		vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-132		vendor-advisoryx_refsource_MS
https://www.exploit-db.com/exploits/38918/		exploitx_refsource_EXPLOIT-DB