SB2016110101 - Privilege escalation in Windows 10

Description

This security bulletin contains information about 1 vulnerability.

1) Privilege escalation (CVE-ID: CVE-2016-7255)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green

The vulnerability allows a local user to gain elevated privileges on the target system.

The weakness is due to improper handling of objects in memory by win32k.sys. By sending a specially crafted system call NtSetWindowLongPtr(), a local attacker can set index GWLP_ID to WS_CHILD value on a window handle with GWL_STYLE and execute arbitrary code with system privileges.

Successful explotation of the vulnerability results in privilege escalation.

Note: this vulnerability is being actively exploited in the wild.

Remediation

Install update from vendor's website.

References

• https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html
• https://technet.microsoft.com/library/security/MS16-135