Title

Multiple Vulnerabilities in Microsoft Windows (MS15-069) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Windows. To exploit these vulnerabilities, an attacker would place a specially crafted DLL file in the target user’s current working directory and then convince the user to launch a program that is designed to load a trusted DLL file but instead loads the attacker’s specially crafted DLL file. If successfully exploited, these vulnerabilities would allow an attacker to execute arbitrary code and install programs; view, change, or delete data; or create new accounts with full user rights.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-61129

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.