Microsoft Internet Explorer CVE-2015-0055 Remote Privilege Escalation Vulnerability

Bugtraq ID:	72479
Class:	Design Error
CVE:	CVE-2015-0055
Remote:	Yes
Local:	No
Published:	Feb 10 2015 12:00AM
Updated:	May 12 2015 07:47PM
Credit:	James Forshaw of Google Project Zero
Vulnerable:	Microsoft Internet Explorer 11 + Microsoft Windows 10 for 32-bit Systems 0 + Microsoft Windows 10 for 32-bit Systems 0 + Microsoft Windows 10 for 32-bit Systems 0 + Microsoft Windows 10 for 32-bit Systems 0 + Microsoft Windows 10 for 32-bit Systems 0 + Microsoft Windows 10 for x64-based Systems 0 + Microsoft Windows 10 for x64-based Systems 0 + Microsoft Windows 10 for x64-based Systems 0 + Microsoft Windows 10 for x64-based Systems 0 + Microsoft Windows 10 for x64-based Systems 0 + Microsoft Windows 10 version 1511 for 32-bit Systems 0 + Microsoft Windows 10 version 1511 for 32-bit Systems 0 + Microsoft Windows 10 version 1511 for 32-bit Systems 0 + Microsoft Windows 10 version 1511 for 32-bit Systems 0 + Microsoft Windows 10 version 1511 for 32-bit Systems 0 + Microsoft Windows 10 version 1511 for x64-based Systems 0 + Microsoft Windows 10 version 1511 for x64-based Systems 0 + Microsoft Windows 10 version 1511 for x64-based Systems 0 + Microsoft Windows 10 version 1511 for x64-based Systems 0 + Microsoft Windows 10 version 1511 for x64-based Systems 0 + Microsoft Windows 10 Version 1607 for 32-bit Systems 0 + Microsoft Windows 10 Version 1607 for 32-bit Systems 0 + Microsoft Windows 10 Version 1607 for 32-bit Systems 0 + Microsoft Windows 10 Version 1607 for x64-based Systems 0 + Microsoft Windows 10 Version 1607 for x64-based Systems 0 + Microsoft Windows 10 Version 1607 for x64-based Systems 0 + Microsoft Windows 10 version 1703 for 32-bit Systems 0 + Microsoft Windows 10 version 1703 for 32-bit Systems 0 + Microsoft Windows 10 version 1703 for 32-bit Systems 0 + Microsoft Windows 10 version 1703 for x64-based Systems 0 + Microsoft Windows 10 version 1703 for x64-based Systems 0 + Microsoft Windows 10 version 1703 for x64-based Systems 0 + Microsoft Windows 10 version 1709 for 32-bit Systems 0 + Microsoft Windows 10 version 1709 for 32-bit Systems 0 + Microsoft Windows 10 version 1709 for x64-based Systems 0 + Microsoft Windows 10 version 1709 for x64-based Systems 0 + Microsoft Windows 10 Version 1803 for 32-bit Systems 0 + Microsoft Windows 10 Version 1803 for x64-based Systems 0 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 8.1 for 32-bit Systems 0 + Microsoft Windows 8.1 for 32-bit Systems 0 + Microsoft Windows 8.1 for 32-bit Systems 0 + Microsoft Windows 8.1 for 32-bit Systems 0 + Microsoft Windows 8.1 for 32-bit Systems 0 + Microsoft Windows 8.1 for x64-based Systems 0 + Microsoft Windows 8.1 for x64-based Systems 0 + Microsoft Windows 8.1 for x64-based Systems 0 + Microsoft Windows 8.1 for x64-based Systems 0 + Microsoft Windows 8.1 for x64-based Systems 0 + Microsoft Windows Rt 8.1 - + Microsoft Windows Rt 8.1 - + Microsoft Windows Rt 8.1 - + Microsoft Windows Rt 8.1 - + Microsoft Windows Rt 8.1 - + Microsoft Windows Server 2016 + Microsoft Windows Server 2016 + Microsoft Windows Server 2016 + Microsoft Windows Server 2008 R2 for Itanium-based Systems SP2 + Microsoft Windows Server 2008 R2 for Itanium-based Systems SP2 + Microsoft Windows Server 2008 R2 for Itanium-based Systems SP2 + Microsoft Windows Server 2008 R2 for Itanium-based Systems SP2 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2012 R2 0 + Microsoft Windows Server 2012 R2 0 + Microsoft Windows Server 2012 R2 0 + Microsoft Windows Server 2012 R2 0 + Microsoft Windows Server 2012 R2 0 Microsoft Internet Explorer 10 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 8 for 32-bit Systems 0 + Microsoft Windows 8 for 32-bit Systems 0 + Microsoft Windows 8 for x64-based Systems 0 + Microsoft Windows 8 for x64-based Systems 0 + Microsoft Windows RT 0 + Microsoft Windows RT 0 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Server 2012 0 + Microsoft Windows Server 2012 0 + Microsoft Windows Server 2012 0 Avaya Messaging Application Server 5.2.1 Avaya Messaging Application Server 5.0.1 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5.0 Avaya Meeting Exchange - Webportal 6.2 Avaya Meeting Exchange - Webportal 6.0 Avaya Meeting Exchange - Webportal 5.2.1 Avaya Meeting Exchange - Webportal 5.2 Avaya Meeting Exchange - Webportal 5.0.1 Avaya Meeting Exchange - Webportal 5.0 Avaya Meeting Exchange - Web Conferencing Server 6.2 Avaya Meeting Exchange - Web Conferencing Server 6.0 Avaya Meeting Exchange - Web Conferencing Server 5.2.1 Avaya Meeting Exchange - Web Conferencing Server 5.2 Avaya Meeting Exchange - Web Conferencing Server 5.0.1 Avaya Meeting Exchange - Web Conferencing Server 5.0 Avaya Meeting Exchange - Streaming Server 6.2 Avaya Meeting Exchange - Streaming Server 6.0 Avaya Meeting Exchange - Streaming Server 5.2.1 Avaya Meeting Exchange - Streaming Server 5.2 Avaya Meeting Exchange - Streaming Server 5.0.1 Avaya Meeting Exchange - Streaming Server 5.0 Avaya Meeting Exchange - Recording Server 6.2 Avaya Meeting Exchange - Recording Server 6.0 Avaya Meeting Exchange - Recording Server 5.2.1 Avaya Meeting Exchange - Recording Server 5.2 Avaya Meeting Exchange - Recording Server 5.0.1 Avaya Meeting Exchange - Recording Server 5.0 Avaya Meeting Exchange - Client Registration Server 6.2 Avaya Meeting Exchange - Client Registration Server 6.0 Avaya Meeting Exchange - Client Registration Server 5.2.1 Avaya Meeting Exchange - Client Registration Server 5.2 Avaya Meeting Exchange - Client Registration Server 5.0.1 Avaya Meeting Exchange - Client Registration Server 5.0 Avaya Communication Server 1000 Telephony Manager 4.0.1 Avaya Communication Server 1000 Telephony Manager 3.0.1 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya Communication Server 1000 Telephony Manager 3.0 Avaya CallPilot 5.1 Avaya CallPilot 5.0.1 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya Aura Conferencing Standard Edition 6.0
Not Vulnerable:

Microsoft Internet Explorer CVE-2015-0055 Remote Privilege Escalation Vulnerability

Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.

Internet Explorer 10 and 11 are vulnerable.

Microsoft Internet Explorer CVE-2015-0055 Remote Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Internet Explorer Homepage (Microsoft)