Title

Microsoft Windows User Profile Service Privilege Escalation Vulnerability (MS15-003) (Cat II impact)

Discussion

Microsoft has released a security advisory addressing a vulnerability in Windows User Profile Service. Windows user profile service provides user with information regarding their user accounts/access. To exploit this vulnerability, an attacker would send an improperly crafted profile to the target system. If successfully exploited, the attacker would gain the ability to elevate their privileges and compromise the system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-58209

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.