Title

Microsoft Common Controls Could Allow Remote Code Execution Vulnerability (MS15-060) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Common Controls. A remote code execution vulnerability exists in Microsoft Common Controls when it accesses an object in memory that has not been correctly initialized or has been deleted. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-60943

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.