What is the severity of CVE-2015-0075?

CVE-2015-0075 has a severity rating of important as it allows local users to gain higher privileges through a crafted application.

How do I fix CVE-2015-0075?

To fix CVE-2015-0075, apply the security updates released by Microsoft for affected Windows versions.

Can CVE-2015-0075 be exploited remotely?

CVE-2015-0075 cannot be exploited remotely; it requires local access to the affected system to succeed.

What type of vulnerability is CVE-2015-0075?

CVE-2015-0075 is an elevation of privilege vulnerability due to improper constraint on impersonation levels within the Windows kernel.

Vulnerability/
CVE-2015-0075

high

7.2

CWE

264

11/3/2015

6/8/2024

CVE-2015-0075

First published: Wed Mar 11 2015(Updated: )

The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Impersonation Level Check Elevation of Privilege Vulnerability."

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows Server 2003	=sp2
Microsoft Windows 7	=sp1
Microsoft Windows 7	=sp1
Microsoft Windows Server	=sp2
Microsoft Windows Server	=r2-sp1
Microsoft Windows Vista	=sp2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2015-0075?
CVE-2015-0075 has a severity rating of important as it allows local users to gain higher privileges through a crafted application.
How do I fix CVE-2015-0075?
To fix CVE-2015-0075, apply the security updates released by Microsoft for affected Windows versions.
What systems are affected by CVE-2015-0075?
CVE-2015-0075 affects Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows Server 2008 R2 SP1, and Windows 7 SP1.
Can CVE-2015-0075 be exploited remotely?
CVE-2015-0075 cannot be exploited remotely; it requires local access to the affected system to succeed.
What type of vulnerability is CVE-2015-0075?
CVE-2015-0075 is an elevation of privilege vulnerability due to improper constraint on impersonation levels within the Windows kernel.

agent/type
agent/weakness
agent/severity
agent/author
agent/references
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/microsoft windows server 2003
version/microsoft windows server 2003/sp2
canonical/microsoft windows 7
version/microsoft windows 7/sp1
canonical/microsoft windows server
version/microsoft windows server/sp2
version/microsoft windows server/r2-sp1
canonical/microsoft windows vista
version/microsoft windows vista/sp2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.