CVE-2015-0001
First published: Tue Jan 13 2015(Updated: )
The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 8.0 | ||
| Microsoft Windows 8.1 | ||
| Microsoft Windows RT | =gold | |
| Microsoft Windows RT | ||
| Microsoft Windows Server | =gold | |
| Microsoft Windows Server 2012 | =r2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html
- http://secunia.com/advisories/62134
- http://www.securityfocus.com/bid/71927
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99514
Frequently Asked Questions
What is the severity of CVE-2015-0001?
CVE-2015-0001 is classified as a privilege escalation vulnerability.
How do I fix CVE-2015-0001?
To mitigate CVE-2015-0001, apply the latest security updates and patches released by Microsoft for affected Windows versions.
What systems are affected by CVE-2015-0001?
CVE-2015-0001 affects Microsoft Windows 8, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows RT.
Who can exploit CVE-2015-0001?
CVE-2015-0001 can be exploited by local users with administrative privileges.
What impact does CVE-2015-0001 have on system security?
Exploitation of CVE-2015-0001 allows attackers to bypass protection mechanisms and access arbitrary process-memory locations.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft windows 8.0
- canonical/microsoft windows 8.1
- canonical/microsoft windows rt
- version/microsoft windows rt/gold
- canonical/microsoft windows server
- version/microsoft windows server/gold
- canonical/microsoft windows server 2012
- version/microsoft windows server 2012/r2