CVE-2015-2474
HighSummary
The vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 allows remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block (SMB) server error-logging action.
Risk Assessment
This threat could lead to unauthorized access to the system and potential takeover by an attacker.
Recommendation
It is recommended to update systems to the latest versions and apply relevant security patches to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Microsoft Windows Vista SP2, Microsoft Windows Server 2008 SP2
See all- CVE-2017-0039High
A vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 related to improper dynamic link library (DLL) loading allows local users to gain privileges via a crafted application.
- CVE-2016-0100High
A vulnerability in Microsoft Windows Vista SP2 and Server 2008 SP2 related to improper library loading, allowing local users to gain privileges via a crafted application.
Original NVD description (English source)
Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server Message Block (SMB) server error-logging action, aka "Server Message Block Memory Corruption Vulnerability."