CVE-2015-2418
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Malicious Software Removal Tool（MSRT）是美国微软（Microsoft）公司的一套用于检测和删除特殊流行恶意软件的工具。 Microsoft MSRT 5.26之前版本中存在特权提升漏洞，该漏洞源于程序没有正确处理动态链接库(.dll)文件。成功利用此漏洞的经身份验证的攻击者能够在目标系统上提升其特权。
Possible ATT&CK Techniques 1 AI
T1079.001
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2015-2418
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Race condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users to gain privileges via a crafted DLL, aka "MSRT Race Condition Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft MSRT 竞争条件漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Malicious Software Removal Tool（MSRT）是美国微软（Microsoft）公司的一套用于检测和删除特殊流行恶意软件的工具。 Microsoft MSRT 5.26之前版本中存在特权提升漏洞，该漏洞源于程序没有正确处理动态链接库(.dll)文件。成功利用此漏洞的经身份验证的攻击者能够在目标系统上提升其特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2015-2418
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-2418
请登录查看更多情报信息。
Vendor Advisories for CVE-2015-2418 (1)
Exploits & Public PoCs for CVE-2015-2418 (1)
Other References for CVE-2015-2418 (1)
-
https://technet.microsoft.com/library/security/3074162 x_refsource_CONFIRM
Same Patch Batch · n/a · 2015-07-20 · 21 CVEs total
| CVE-2015-0157 | IBM DB2 拒绝服务漏洞 | |
| CVE-2015-4111 | BlackBerry Link 输入验证漏洞 | |
| CVE-2015-1984 | IBM InfoSphere Master Data Management 信息泄露漏洞 | |
| CVE-2015-1982 | IBM InfoSphere Master Data Management 信息泄露漏洞 | |
| CVE-2015-1980 | IBM InfoSphere Master Data Management 权限许可和访问控制漏洞 | |
| CVE-2015-1979 | IBM Case Manager 跨站脚本漏洞 | |
| CVE-2015-1968 | IBM InfoSphere Master Data Management Collaborative 跨站脚本漏洞 | |
| CVE-2015-1935 | IBM DB2 scalar-function 安全漏洞 | |
| CVE-2015-1922 | IBM DB2 Data Movement 安全漏洞 | |
| CVE-2015-1883 | IBM DB2 database automated maintenance 信息泄露漏洞 | |
| CVE-2015-0253 | Apache HTTP Server 安全漏洞 | |
| CVE-2015-0130 | 多款IBM产品跨站脚本漏洞 | |
| CVE-2014-8910 | IBM DB2 安全漏洞 | |
| CVE-2015-2426 | Microsoft Windows OpenType字体驱动程式漏洞 | |
| CVE-2015-5124 | 多款Adobe产品缓冲区溢出漏洞 | |
| CVE-2015-4279 | Cisco B Blade Server Unified Computing System Manager组件操作系统命令注入漏洞 | |
| CVE-2015-3185 | Apache HTTP Server 权限许可和访问控制问题漏洞 | |
| CVE-2015-3183 | Apache HTTP Server 输入验证错误漏洞 | |
| CVE-2015-2863 | Kaseya Virtual System Administrator 输入验证漏洞 | |
| CVE-2015-2862 | Kaseya Virtual System Administrator 目录遍历漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2015-2418
No comments yet