Matthew Cox

An issue exists in Windows HTTP.sys where an untrusted pointer dereference can allow a locally authenticated attacker to gain elevated privileges. The issue allows attackers to affect the system.

A time-of-check time-of-use (TOCTOU) race condition exists in Windows HTTP.sys. This condition can be exploited by an authorized attacker to gain elevated privileges on a local system. The issue involves a flaw in how the system verifies conditions between the time a check is performed and the time the result of that check is used.

An issue exists in Windows HTTP.sys where an untrusted pointer dereference can lead to local privilege escalation. An authorized attacker can exploit this to gain elevated privileges on a system.

Name of the Vulnerable Software and Affected Versions: Windows Internet Information Services (affected versions not specified) Description: An out-of-bounds read issue exists in Windows Internet Information Services, potentially allowing an unauthorized attacker to cause a denial-of-service condition over a network. This issue can affect the system, leading to a denial-of-service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.