This script is Copyright (C) 2015-2017 Tenable Network Security, Inc.
The remote Windows host is affected by a privilege escalation
The version of Windows Installer Service installed on the remote
Windows host is missing Cumulative Security Update 3072630. It is,
therefore, affected by an elevation of privilege vulnerability in the
Windows Installer service due to improperly running customized action
scripts. A local attacker, using specially crafted code that gets
executed by a vulnerable .msi package, can exploit this vulnerability
to gain elevated privileges.
See also :
Microsoft has released a set of patches for 2003, Vista, 2008, 7, 2008
R2, 8, 2012, 8.1, 2012 R2, and 10.
Risk factor :
Medium / CVSS Base Score : 6.9
CVSS Temporal Score : 5.7
Public Exploit Available : true