The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability."
References
Link | Resource |
---|---|
http://www.securitytracker.com/id/1034114 | Third Party Advisory VDB Entry |
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-115 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-11-11 04:59
Updated : 2019-05-15 07:48
NVD link : CVE-2015-6109
Mitre link : CVE-2015-6109
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
microsoft
- windows_rt_8.1
- windows_8.1
- windows_server_2012
- windows_10