MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)
High Nessus Plugin ID 94012
SynopsisThe remote host is affected by multiple vulnerabilities.
DescriptionThe remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :
- Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to improper handling of objects in memory. A local attacker can exploit these, via a specially crafted application, to execute arbitrary code in kernel mode. (CVE-2016-3266, CVE-2016-3376, CVE-2016-7185, CVE-2016-7191)
- An elevation of privilege vulnerability exists in Windows Transaction Manager due to improper handling of objects in memory. A local attacker can exploit this, via a specially crafted application, to execute processes in an elevated context. (CVE-2016-3341)
SolutionMicrosoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10.