MS15-074: Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)

This script is Copyright (C) 2015-2017 Tenable Network Security, Inc.


Synopsis :

The remote Windows host is affected by a privilege escalation
vulnerability.

Description :

The version of Windows Installer Service installed on the remote
Windows host is missing Cumulative Security Update 3072630. It is,
therefore, affected by an elevation of privilege vulnerability in the
Windows Installer service due to improperly running customized action
scripts. A local attacker, using specially crafted code that gets
executed by a vulnerable .msi package, can exploit this vulnerability
to gain elevated privileges.

See also :

https://technet.microsoft.com/library/security/MS15-074

Solution :

Microsoft has released a set of patches for 2003, Vista, 2008, 7, 2008
R2, 8, 2012, 8.1, 2012 R2, and 10.

Risk factor :

Medium / CVSS Base Score : 6.9
(CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 5.7
(CVSS2#E:F/RL:OF/RC:ND)
Public Exploit Available : true

Family: Windows : Microsoft Bulletins

Nessus Plugin ID: 84745 ()

Bugtraq ID:

CVE ID: CVE-2015-2371

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now