CVE-2015-2513: Input Validation

Published Sep 9, 2015

Updated

Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file, aka "Windows Journal RCE Vulnerability," a different vulnerability than CVE-2015-2514 and CVE-2015-2530.

Affected Software

11 affected components

Microsoft Windows 10

Microsoft Windows 7=sp1

Microsoft Windows 8

Microsoft Windows 8.1

Microsoft Windows RT

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Vista=sp2

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-098

Event History

Sep 9, 2015

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2513?

CVE-2015-2513 is rated as critical, allowing remote code execution.

How do I fix CVE-2015-2513?

To fix CVE-2015-2513, apply the latest security updates provided by Microsoft.

Which systems are affected by CVE-2015-2513?

CVE-2015-2513 affects Microsoft Windows Vista SP2, Server 2008 SP2, Windows 7 SP1, Windows 8, 8.1, Windows Server 2012, and Windows 10.

What type of attacks can exploit CVE-2015-2513?

Attackers can exploit CVE-2015-2513 by sending a malicious .jnt file to execute arbitrary code on the victim's system.

Is there a workaround for CVE-2015-2513?

Currently, disabling Windows Journal is recommended as a temporary workaround for CVE-2015-2513.