Microsoft Windows CVE-2014-6322 Remote Privilege Escalation Vulnerability

Bugtraq ID:	70978
Class:	Unknown
CVE:	CVE-2014-6322
Remote:	Yes
Local:	No
Published:	Nov 11 2014 12:00AM
Updated:	Jul 06 2016 02:32PM
Credit:	James Forshaw of Google Project Zero
Vulnerable:	Microsoft Windows Vista SP2 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1
Not Vulnerable:

Microsoft Windows CVE-2014-6322 Remote Privilege Escalation Vulnerability

Microsoft Windows is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges.

Microsoft Windows CVE-2014-6322 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Microsoft Windows 8.1 for x64-based Systems 0

• Microsoft Security Update for Windows 8.1 for x64-based Systems (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=e86f6680-7ca6 -4daf-8f3b-fa5817697a2b

Microsoft Windows Vista SP2

• Microsoft Security Update for Windows Vista (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=128b634e-b84a -470e-b079-da05f3887b93

Microsoft Windows 8 for 32-bit Systems 0

• Microsoft Security Update for Windows 8 (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=0d0517bd-b655 -4c0b-997f-5ce8a6d6acf0

Microsoft Windows 7 for 32-bit Systems SP1

• Microsoft Security Update for Windows 7 (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=a1a59619-48cb -4fd7-99a3-6ae192651fca

Microsoft Windows Server 2008 R2 for x64-based Systems SP1

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=ed27de55-608b -4100-83c8-6a6d650c2617

Microsoft Windows 7 for x64-based Systems SP1

• Microsoft Security Update for Windows 7 for x64-based Systems (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=ff321be2-21a4 -4a83-8627-39ee66ec3b5c

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=f2a8b834-ba6c -4b73-97be-5c0a67012e34

Microsoft Windows Server 2012 0

• Microsoft Security Update for Windows Server 2012 (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=7311cd7b-b766 -4738-bd30-b8742e9d65c1

Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Security Update for Windows Server 2008 (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=b9cd9561-bf89 -4407-a675-e88fc2de292d

Microsoft Windows 8 for x64-based Systems 0

• Microsoft Security Update for Windows 8 for x64-based Systems (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=14993001-5fe7 -48da-9c97-5466b54d3b71

Microsoft Windows Server 2012 R2 0

• Microsoft Security Update for Windows Server 2012 R2 (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=67d42388-0e33 -4568-a9ef-08f12dc113b9

Microsoft Windows 8.1 for 32-bit Systems 0

• Microsoft Security Update for Windows 8.1 (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=c2731c48-0d62 -45f1-ae85-ff0ab2f81de6

Microsoft Windows Server 2008 for x64-based Systems SP2

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB3005607)
  http://www.microsoft.com/downloads/details.aspx?familyid=f712163c-8cae -4e43-8165-c3f5ddddf885