CVE-2015-6109 in Windows

Résumé

par MITRE

The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability."

Once again VulDB remains the best source for vulnerability data.

• Réserver: 14/08/2015
• Divulgation: 11/11/2015
• Modérer: accepté
• Entrée: VDB-79173
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 2.1 (NVD)
• EPSS: 0.03383
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6109
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6109
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6109/