CVE-2015-6098

Buffer overflow in the Network Driver Interface Standard (NDIS) implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows NDIS Elevation of Privilege Vulnerability."

Affected products

Ndis, Windows, Windows 7, Windows Server 2008, Windows Vista

Microsoft Windows 7

All versions

Microsoft Windows Server 2008

All versions

Microsoft Windows Vista

All versions

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

4.0% (90th percentile)

Weakness

CWE-264, CWE-119

NVD status

Modified

Published

2015-11-11