CVE-2015-1681

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service via a crafted .msc file, aka Microsoft Management Console File Format Denial of Service Vulnerability.

Risk Information

Base Score
5.5
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.207

Associated Vulnerability

VulnerabilityOS Platform
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Vista (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Server 2008 (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows 7 (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows 8 (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows 8.1 (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Vista for x64-based Systems (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Server 2008 x64 Edition (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows 7 for x64-based Systems (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Server 2008 R2 x64 Edition (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows 8 for x64-based Systems (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Server 2012 (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows 8.1 for x64-based Systems (KB3051768)Windows
ms15-054: vulnerability in microsoft management console file format could allow denial of service: may 12, 2015 for Windows Server 2012 R2 (KB3051768)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-17817Security Update for Windows Vista (KB3051768)
PATCH-17818Security Update for Windows Server 2008 (KB3051768)
PATCH-17819Security Update for Windows 7 (KB3051768)
PATCH-17820Security Update for Windows 8 (KB3051768)
PATCH-17821Security Update for Windows 8.1 (KB3051768)
PATCH-17822Security Update for Windows Vista for x64-based Systems (KB3051768)
PATCH-17823Security Update for Windows Server 2008 x64 Edition (KB3051768)
PATCH-17824Security Update for Windows 7 for x64-based Systems (KB3051768)
PATCH-17825Security Update for Windows Server 2008 R2 x64 Edition (KB3051768)
PATCH-17826Security Update for Windows 8 for x64-based Systems (KB3051768)
PATCH-17827Security Update for Windows Server 2012 (KB3051768)
PATCH-17828Security Update for Windows 8.1 for x64-based Systems (KB3051768)
PATCH-17829Security Update for Windows Server 2012 R2 (KB3051768)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234