CVE-2016-0099

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。Secondary Logon Service是其中的一个辅助登录服务。 Microsoft Windows的辅助登录服务存在特权提升漏洞，该漏洞源于程序没有正确管理内存中的请求句柄。本地攻击者可利用该漏洞以管理员身份运行任意代码。以下版本受到影响：Microsoft Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8.1

CVE-2016-0099 affects n/a n/a. Confirmed exploitation in the wild; remediate immediately. Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。Secondary Logon Service是其中的一个辅助登录服务。 Microsoft Windows的辅助登录服务存在特权提升漏洞，该漏洞源于程序没有正确管理内存中的请求句柄。本地攻击者可利用该漏洞以管理员身份运行任意代码。以下版本受到影响：Microsoft CVE-2016-0099 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2016-0099

I. Basic Information for CVE-2016-0099

Affected Products

II. Public POCs for CVE-2016-0099

III. Intelligence Information for CVE-2016-0099

Vendor Advisories for CVE-2016-0099 (3)

• http://www.securityfocus.com/bid/84034 vdb-entry x_refsource_BID
• http://www.securitytracker.com/id/1035210 vdb-entry x_refsource_SECTRACK
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-032 vendor-advisory x_refsource_MS

Exploits & Public PoCs for CVE-2016-0099 (4)

• https://www.exploit-db.com/exploits/39574/ exploit x_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/39719/ exploit x_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/40107/ exploit x_refsource_EXPLOIT-DB
• https://www.exploit-db.com/exploits/39809/ exploit x_refsource_EXPLOIT-DB

• https://www.cve.org/CVERecord?id=CVE-2016-0099

Same Patch Batch · n/a · 2016-03-09 · 53 CVEs total

Showing top 20 of 53 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2016-0099