Elevation of privilege in Microsoft products - CVE-2016-3310

Vulnerability details

The vulnerability allows a local user to gain elevated privileges on vulnerable system.

The vulnerability exists due to boundary error in Win32k.sys driver when handling objects in memory. A local user can trigger buffer overflow and execute arbitrary code with SYSTEM privileges.

Successful exploitation of this vulnerability will allow a local user to gain complete access to vulnerable system.

Affected software

How to mitigate CVE-2016-3310

External References

• https://technet.microsoft.com/en-us/library/security/ms16-098.aspx

Related Security Bulletins

• Multiple vulnerabilities in Windows Win32k.sys driver
• Win32k Elevation of Privilege Vulnerability
• Security Update for Windows Kernel-Mode Drivers