CVE-2015-2369 — Microsoft Windows Server 2008 vulnerability

7 documents6 sources
Severity
6.9MEDIUMNVD
EPSS
3.5%
top 12.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Server 2008
Timeline
PublishedJul 14
Latest updateJan 27

Description

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rtf file, aka "DLL Planting Remote Code Execution Vulnerability."

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-3r5c-h748-vjgc: Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a↗2022-05-14
▶

🔍Detection Rules

1
Suricata
ET HUNTING Microsoft Windows rapi.dll DLL Planting Remote Code Execution (CVE-2015-2369)↗2025-01-27
▶

🕵️Threat Intelligence

3
Talos
Microsoft Patch Tuesday – July 2015↗2015-07-14
▶
Talos
Microsoft Patch Tuesday – July 2015↗2015-07-14
▶
Zscaler
Zscaler found Multiple Security Vulnerabilities | 07-21-2015↗
▶

💬Community

1
Bugzilla
CVE-2015-3248 openhpi: world writable /var/lib/openhpi directory↗2015-06-19
▶