The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka "Windows Print Spooler Elevation of Privilege Vulnerability."

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     Windows Print Spooler service due to improper validation     of print drivers while installing a printer from network     servers. An unauthenticated, remote attacker can exploit     this vulnerability, via a man-in-the-middle attack on a     workstation or print server or via a rogue print server,     to execute arbitrary code in the context of the current     user. (CVE-2016-3238)

  - An elevation of privilege vulnerability exists in the     Windows Print Spooler service due to improperly allowing     arbitrary writing to the file system. An attacker can     exploit this issue, via a specially crafted script or     application, to execute arbitrary code with elevated     system privileges. (CVE-2016-3239)

Detections

Analytics

CVE-2016-3239

high

Tenable Plugins

critical