Main Vulnerability Database Vulnerabilities #VU20973

Buffer overflow in Microsoft Windows and Windows Server - CVE-2019-1215

Published: September 10, 2019

Vulnerability identifier: #VU20973

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-1215

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the ws2ifsl.sys (Winsock). A local user can run a specially crafted application, trigger memory corruption and execute arbitrary code on the target system with elevated privileges.

Note, this vulnerability is being actively exploited in the wild.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2019-1215

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215

Related Security Bulletins