ID:822 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2016-0143

 
Main Vulnerability Database Exploits ID:822 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2016-0143

ID:822 - Exploit for Privilege escalation in Windows and Windows Server - CVE-2016-0143

Published: March 18, 2020


Vulnerability identifier: #VU5058
Vulnerability risk: Medium
CVE-ID: CVE-2016-0143
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to improper handling of objects in memory by the kernel-mode driver. A local attacker can run a specially crafted program, gain elevated privileges and execute arbitrary code with SYSTEM privileges.

Successful exploitation of this vulnerability may result in arbitrary code execution on the vulnerable system.


Remediation

Install update from vendor's website.