CVE-2015-0075: High severity microsoft windows server 2003 vulnerability
The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Impersonation Level Check Elevation of Privilege Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0075?
CVE-2015-0075 has a severity rating of important as it allows local users to gain higher privileges through a crafted application.
How do I fix CVE-2015-0075?
To fix CVE-2015-0075, apply the security updates released by Microsoft for affected Windows versions.
What systems are affected by CVE-2015-0075?
CVE-2015-0075 affects Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows Server 2008 R2 SP1, and Windows 7 SP1.
Can CVE-2015-0075 be exploited remotely?
CVE-2015-0075 cannot be exploited remotely; it requires local access to the affected system to succeed.
What type of vulnerability is CVE-2015-0075?
CVE-2015-0075 is an elevation of privilege vulnerability due to improper constraint on impersonation levels within the Windows kernel.