MALWARELIST.net – Your Information Security Source

Microsoft patches two critical vulnerabilities in the Windows:

• Directory traversal attack CVE-2015-0016 (vulnerability exists in the TS WebProxy Windows component)
• Buffer Overflow Vulnerability CVE-2015-0014 (A buffer overflow vulnerability exists in Windows Telnet service)

Bypass security restrictions in Microsoft Windows (Directory traversal attack)

Danger level: High
The presence of fixes: Yes
The number of vulnerabilities: 1

CVSSv2 rating: (AV: N / AC: L / Au: N / C: P / I: P / A: P / E: F / RL: O / RC: C) = Base: 7.5 / Temporal: 6.2
CVE ID: CVE-2015-0016

Vector of operation: Remote
Impact: Security Bypass (Elevation of Privilege), Directory traversal attack
Exploit Availability: Yes

Affected Products:Microsoft Windows 7, Windows 8, Windows 8.1, Windows RT 8.1, Windows RT, Windows Server 2008, Windows Server 2012, Windows Vista
Affected versions: Microsoft Windows 7, 8, 8.1, RT, RT 8.1, Server 2008, Server 2012, Vista

Description:
The vulnerability allows a remote user to bypass certain security restrictions (Could Allow Elevation of Privilege).

[CVE-2015-0016] – The vulnerability is caused due to an error when processing characters of a directory traversal (or path traversal) in component TS WebProxy Windows. This can be exploited to obtain elevated privileges.

Note: The vulnerability is actively exploited in the present moment.

System compromise in Microsoft Windows (Telnet Service Buffer Overflow Vulnerability)

Danger level: High
The presence of fixes: Yes
The number of vulnerabilities: 1

CVSSv2 rating: (AV: N / AC: M / Au: N / C: C / I: C / A: C / E: U / RL: OF / RC: C) = Base: 9.3 / Temporal: 6.9
CVE ID: CVE-2015-0014
Vector of operation: Remote
Impact: System compromise, Remote Code Execution (Buffer Overflow)

Affected Products:

• Microsoft Windows Server 2003 (Web Edition, Standard Edition, Enterprise Edition, Datacenter Edition)
• Microsoft Windows Vista, Windows 7
• Microsoft Windows Server 2008, Server 2008 R2
• Microsoft Windows Server 2012, Server 2012 R2
• Microsoft Windows 8.1, 8

Affected versions:

• Microsoft Windows Server 2003, 2008, 2008 R2, 2012, 2012 R2
• Microsoft Windows Vista, 7, 8, 8.1

Description:
The vulnerability allows a remote user to compromise a system (could then run arbitrary code on the server).

[CVE-2015-0014] – The vulnerability is caused due to an error in the validation of input data in Telnet. This can be exploited via a specially crafted packet to cause a buffer overflow and execute arbitrary code on the target system.

Solution: Install the hotfix from the manufacturer.

References:
https://technet.microsoft.com/en-us/library/security/ms15-004.aspx
https://technet.microsoft.com/library/security/MS15-002

---

 

Manufacturer URL: https://windows.com