Kaspersky Threats

KLA10924
Privilege escalation and information disclosure vulnerabilities in Microsoft Windows

Updated: 06/18/2020

Detect date ?	12/13/2016
Severity ?	Critical
Description	Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities: An improper handling of objects in memory while running a Windows Crypto driver in kernel mode can be exploited locally via a specially designed application to obtain sensitive information; Improper sanitizing of input (which leads to an insecure library loading behavior) in the Windows Installer can be exploited locally via a specially designed application to gain privileges; An improper handling of objects in memory in the Windows Common Log File System (CLFS) can be exploited locally via a specially designed application to obtain sensitive information from process memory.
Affected products	Microsoft Windows Vista Service Pack 2 Microsoft Windows 7 Microsoft Windows 7 Service Pack 1 Microsoft Windows 8.1 Microsoft Windows 10 Microsoft Windows Server 2008 Microsoft Windows Server 2008 Service Pack 2 Microsoft Windows Server 2008 R2 Service Pack 1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	MS16-149 MS16-153 CVE-2016-7271 CVE-2016-7273 CVE-2016-7272 CVE-2016-7257 CVE-2016-7281 CVE-2016-7279 CVE-2016-7278 CVE-2016-7283 CVE-2016-7282 CVE-2016-7292 CVE-2016-7274 CVE-2016-7295 CVE-2016-7219 CVE-2016-7258 CVE-2016-7259 CVE-2016-7260
Impacts ?	ACE [?] OSI [?] DoS [?] CI [?] SB [?] PE [?]
Related products	Microsoft Windows Vista Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows 10
CVE-IDS ?	CVE-2016-72714.6Warning CVE-2016-72730.0Unknown CVE-2016-72720.0Unknown CVE-2016-72570.0Unknown CVE-2016-72812.6Warning CVE-2016-72797.6Critical CVE-2016-72782.6Warning CVE-2016-72839.3Critical CVE-2016-72824.3Warning CVE-2016-72927.2High CVE-2016-72749.3Critical CVE-2016-72952.1Warning CVE-2016-72192.1Warning CVE-2016-72582.1Warning CVE-2016-72597.2High CVE-2016-72607.2High
Microsoft official advisories	Microsoft Security Update Guide
KB list	3208481 3205386 3205383 3205401 3205400 3205408 3205409 3207752 3205394 3206632 3196726 3203838 3196348 3204724 3204808 3205638 3204723
Exploitation	The following public exploits exists for this vulnerability: https://www.exploit-db.com/exploits/41615 Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.