MS16-075: Security Update for Windows SMB Server (3164038)
High Nessus Plugin ID 91603
SynopsisThe remote Windows host is affected by an elevation of privilege vulnerability.
DescriptionThe remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Microsoft Server Message Block (SMB) server when handling forwarded credential requests that are intended for another service running on the same host. An authenticated attacker can exploit this, via a specially crafted application, to execute arbitrary code with elevated permissions.
SolutionMicrosoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10.