Null pointer dereference in Microsoft Windows and Windows Server - CVE-2015-1721

Vulnerability identifier: #VU5382

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-1721

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local attacker to obtain elevated privileges on the target system.

The weakness exists due to null pointer dereference. A local attacker can run a specially crafted program to gain administrative privileges and execute arbitrary code in kernel mode.

Successful exploitation of the vulnerability may result in arbitrary code execution on the vulnerable system.

Microsoft Windows
Windows Server

Install update from vendor's website.

• Exploit #913 - Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard (MS15-061) (March 18, 2020)

• https://technet.microsoft.com/en-us/library/security/ms15-061

• Multiple vulnerabilities in Microsoft Windows
• Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege