CVE-2015-0016

Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold va R2 va Windows RT Gold va 8.1 versiyalarida TS WebProxy (aka TSWbPrxy) komponentidagi kataloglarni o'tkazish zaifligi masofaviy tajovuzkorlarga fayl nomini olish imkonini beradi. past yaxlitlikdan o'rta yaxlitlikka, ya'ni "imtiyozlarning zaifligining kataloglarni kesib o'tishi" ga o'tish orqali namoyon bo'ldi.

CVSS Vector

Manbalar

• http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox/
• http://packetstormsecurity.com/files/130201/MS15-004-Microsoft-Remote-Desktop-Services-Web-Proxy-IE-Sandbox-Escape.html
• http://secunia.com/advisories/62076
• http://www.exploit-db.com/exploits/35983
• http://www.securityfocus.com/bid/71965