CVE-2015-2418: Race Condition
Published Jul 20, 2015
·Updated
Race condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users to gain privileges via a crafted DLL, aka "MSRT Race Condition Vulnerability."
Affected Software
1 affected component
Microsoft Malicious Software Removal Tool<=5.25
Remediation
Patch Available
Event History
Jul 20, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2418?
CVE-2015-2418 is classified as a privilege escalation vulnerability.
2
How do I fix CVE-2015-2418?
To fix CVE-2015-2418, update the Microsoft Malicious Software Removal Tool to version 5.26 or later.
3
Who is affected by CVE-2015-2418?
CVE-2015-2418 affects users of Microsoft Malicious Software Removal Tool versions prior to 5.26.
4
What causes CVE-2015-2418?
CVE-2015-2418 is caused by a race condition in the Microsoft Malicious Software Removal Tool.
5
Can CVE-2015-2418 be exploited remotely?
CVE-2015-2418 requires local user access to exploit the privileges, making it not a remote vulnerability.