Windows NTLM Elevation of Privilege Vulnerability for Windows 7 (KB3197868)

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
65.102%

CVE Information

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
21695

Patch Description
November, 2016 Security Monthly Quality Rollup for Windows 7 (KB3197868)

References

http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/
http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html
http://technet.microsoft.com/security/bulletin/MS16-129
http://technet.microsoft.com/security/bulletin/MS16-130
http://technet.microsoft.com/security/bulletin/MS16-132
http://technet.microsoft.com/security/bulletin/MS16-134
http://technet.microsoft.com/security/bulletin/MS16-135
http://technet.microsoft.com/security/bulletin/MS16-137
http://technet.microsoft.com/security/bulletin/MS16-142
http://www.securityfocus.com/bid/93991
http://www.securityfocus.com/bid/93998
http://www.securityfocus.com/bid/94000
http://www.securityfocus.com/bid/94004
http://www.securityfocus.com/bid/94009
http://www.securityfocus.com/bid/94010
http://www.securityfocus.com/bid/94011
http://www.securityfocus.com/bid/94012
http://www.securityfocus.com/bid/94014
http://www.securityfocus.com/bid/94015
http://www.securityfocus.com/bid/94027
http://www.securityfocus.com/bid/94033
http://www.securityfocus.com/bid/94040
http://www.securityfocus.com/bid/94045
http://www.securityfocus.com/bid/94051
http://www.securityfocus.com/bid/94052
http://www.securityfocus.com/bid/94053
http://www.securityfocus.com/bid/94057
http://www.securityfocus.com/bid/94059
http://www.securityfocus.com/bid/94063
http://www.securityfocus.com/bid/94064
http://www.securityfocus.com/bid/94065
http://www.securityfocus.com/bid/94156
http://www.securitytracker.com/id/1037241
http://www.securitytracker.com/id/1037243
http://www.securitytracker.com/id/1037245
http://www.securitytracker.com/id/1037249
http://www.securitytracker.com/id/1037251
http://www.securitytracker.com/id/1037252
http://www.zerodayinitiative.com/advisories/ZDI-16-592
http://www.zerodayinitiative.com/advisories/ZDI-16-594
https://github.com/mwrlabs/CVE-2016-7255
https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/
https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html
https://twitter.com/da5ch0/status/820161895269277696
https://www.exploit-db.com/exploits/40744/
https://www.exploit-db.com/exploits/40745/
https://www.exploit-db.com/exploits/40823/
https://www.exploit-db.com/exploits/41015/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7184
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7218
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7210
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7246
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7199
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3334
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3340
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7212
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7239
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7215
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3343
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7221
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7238
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7227
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7255
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7195
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3333
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3332
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3335
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3342
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-0026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7248
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7205
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7216