NVD

Id
22549  
Name
CVE-2015-0008  
Description
The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client, which allows remote attackers to execute arbitrary code by making crafted data available on a UNC share, as demonstrated by Group Policy data from a spoofed domain controller, aka "Group Policy Remote Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-10  
Modified Date
2015-11-30  
Seq
2015-0008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119477 22549 CVE-2015-0008 http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx  View
119478 22549 CVE-2015-0008 MS15-011  View
119479 22549 CVE-2015-0008 VU#787252  View
119480 22549 CVE-2015-0008 72477  View
119481 22549 CVE-2015-0008 1031719  View
119482 22549 CVE-2015-0008 ms-grouppolicy-cve20150008-code-exec(100426)  View
119483 22549 CVE-2015-0008 https://www.jasadvisors.com/additonal-jasbug-security-exploit-info/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6084 JVNDB-2015-001404 複数の Microsoft Windows 製品の UNC の実装における任意のコードを実行される脆弱性 複数の Microsoft Windows 製品の UNC の実装は、サーバからクライアントに対する認証を含まないため、任意のコードを実行される脆弱性が存在します。 CVE-2015-0008 77219 CVE-2015-0008 22549 8.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001404.html 2015-02-10 2015-02-17 View