CVE-2016-0007

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Microsoft Windows中存在特权提升漏洞，该漏洞源于程序没有正确验证沙盒应用程序设置的重分析点。本地攻击者可利用该漏洞在本地系统的安全上下文中运行任意代码。以下版本受到影响：Microsoft Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8，Windows 8.1，Windows Server 2012

CVE-2016-0007 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Microsoft Windows中存在特权提升漏洞，该漏洞源于程序没有正确验证沙盒应用程序设置的重分析点。本地攻击者可利用该漏洞在本地系统的安全上下文中运行任意代码。以下版本受到影响：Microsoft Windows Vista SP2，Windows Serv CVE-2016-0007 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2016-0007

I. Basic Information for CVE-2016-0007

Affected Products

II. Public POCs for CVE-2016-0007

III. Intelligence Information for CVE-2016-0007

Vendor Advisories for CVE-2016-0007 (3)

• http://www.securityfocus.com/bid/79898 vdb-entry x_refsource_BID
• http://www.securitytracker.com/id/1034645 vdb-entry x_refsource_SECTRACK
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-008 vendor-advisory x_refsource_MS

Exploits & Public PoCs for CVE-2016-0007 (2)

• https://www.exploit-db.com/exploits/39311/ exploit x_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/39310/ exploit x_refsource_EXPLOIT-DB

Other References for CVE-2016-0007 (1)

• https://code.google.com/p/google-security-research/issues/detail?id=589 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2016-0007

Same Patch Batch · n/a · 2016-01-13 · 28 CVEs total

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2016-0007