MS14-015

The remote Windows host has the following vulnerabilities :

  - A privilege escalation vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory.	If successfully exploited, a locally     authenticated attacker could run a specially crafted     application in kernel mode to take control of the     system. (CVE-2014-0300)

  - An information disclosure vulnerability exists in the     Windows kernel-mode driver due to improper handling of     objects in memory. An attacker could exploit this issue     to disclose information from kernel memory on the local     system. (CVE-2014-0323)

CVE-2014-0323

medium

Tenable Plugins

high