Microsoft Windows CVE-2015-0002 Local Privilege Escalation Vulnerability

Bugtraq ID:	71972
Class:	Unknown
CVE:	CVE-2015-0002
Remote:	No
Local:	Yes
Published:	Jan 13 2015 12:00AM
Updated:	May 07 2015 05:25PM
Credit:	Microsoft
Vulnerable:	Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0
Not Vulnerable:

Microsoft Windows CVE-2015-0002 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Microsoft Windows 8 for 32-bit Systems 0

• Microsoft Security Update for Windows 8 (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=067FB2FD-CEC2 -4C3A-BF02-4DA8053CCD27

Microsoft Windows 7 for 32-bit Systems SP1

• Microsoft Security Update for Windows 7 (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=17B4575E-D03E -4E93-BA49-BFACD7C066DB

Microsoft Windows 7 for x64-based Systems SP1

• Microsoft Security Update for Windows 7 for x64-based Systems (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=DD75D852-FFD2 -4785-B214-BC16325C670D

Microsoft Windows 8 for x64-based Systems 0

• Microsoft Security Update for Windows 8 for x64-based Systems (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=389A8442-9060 -4BE7-9652-5837A1E050EE

Microsoft Windows 8.1 for 32-bit Systems 0

• Microsoft Security Update for Windows 8.1 (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=F54F1257-26E5 -40FA-8E9E-7D16B804A9D3

Microsoft Windows 8.1 for x64-based Systems 0

• Microsoft Security Update for Windows 8.1 for x64-based Systems (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=D102C23D-42FB -4966-9750-F20F1A9DEFAC

Microsoft Windows Server 2008 R2 for x64-based Systems SP1

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=96BBE334-EB09 -4024-ABF8-FF9C6BDA37D9

Microsoft Windows Server 2012 0

• Microsoft Security Update for Windows Server 2012 (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=43017E5D-2908 -4C81-A6EB-1CC0694BAB97

Microsoft Windows Server 2012 R2 0

• Microsoft Security Update for Windows Server 2012 R2 (KB3023266)
  http://www.microsoft.com/downloads/details.aspx?familyid=0C37FC81-24C3 -40CA-8001-17FEDA2E1D44

Microsoft Windows CVE-2015-0002 Local Privilege Escalation Vulnerability

References:

• Microsoft Windows Homepage (Microsoft )