Lucene search

K
cve[email protected]CVE-2015-0011
HistoryJan 13, 2015 - 10:59 p.m.

CVE-2015-0011

2015-01-1322:59:04
CWE-264
web.nvd.nist.gov
31
cve-2015-0011
mrxdav.sys
webdav
elevation of privilege
vulnerability
microsoft windows
nvd

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:C/A:N

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass an impersonation protection mechanism, and obtain privileges for redirection of WebDAV requests, via a crafted application, aka “WebDAV Elevation of Privilege Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7Match-sp1
OR
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rtMatch-gold
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1
OR
microsoftwindows_server_2012Match-gold
OR
microsoftwindows_server_2012Matchr2x64

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:C/A:N

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%