Product:
Windows
Summary
The Secondary Logon Service in Microsoft Windows does not properly process request handles, allowing local users to gain privileges via a crafted application. This vulnerability affects multiple versions of Windows including Vista, Server 2008, 7, 8.1, and 10. It is known as the Secondary Logon Elevation of Privilege Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2016-0099 |
Exploitation
To exploit this vulnerability, an attacker must be a local user and create a specially crafted application that interacts with the Secondary Logon Service. By executing this application, the attacker can manipulate request handles to elevate their privileges on the system, potentially gaining access to sensitive information or system controls.
Affected Products
- Windows Vista SP2: Affected by the vulnerability allowing privilege escalation.
- Windows Server 2008 SP2: Vulnerable to local privilege escalation through crafted applications.
- Windows 7 SP1: Local users can exploit this vulnerability to gain elevated privileges.
- Windows 8.1: Susceptible to privilege escalation via the Secondary Logon Service.
- Windows Server 2012 Gold and R2: Vulnerable to exploitation by local users.
- Windows RT 8.1: Affected by the privilege escalation vulnerability.
- Windows 10 Gold and 1511: Local users can exploit this vulnerability to gain higher privileges.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Keeping systems updated will help protect against potential exploitation of this vulnerability.