Title

Microsoft Windows Winsock Privilege Escalation Vulnerability (MS15-119) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Winsock. Winsock is a programming interface and the supporting program that handles input/output requests for Internet applications in a Windows operating system. . To exploit this vulnerability, an attacker makes a call to a memory address without verifying that the address is valid. If successfully exploited, the attacker could gain elevated privileges on a targeted system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-62905

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.