Title

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (MS15-037) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Windows Task Scheduler. Task Scheduler is a Windows service that enables the automation of routine tasks on a chosen computer. To exploit this vulnerability, an attacker would engineer the task to execute a specially crafted application in the context of the System account. If successfully exploited, the attacker would gain the ability to install/view/change/delete data and accounts with the rights of the user.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-59891

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.