Title

Microsoft Windows Shell Remote Code Execution Vulnerability (MS16-057) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability affecting various versions of Microsoft Windows. To exploit this vulnerability, a remote attacker would entice a user to access a file with a malicious name. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code in the context of the currently logged-in user.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68753

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.