vendor:
Windows
by:
Ruben Boonen (@FuzzySec)
8.8
CVSS
HIGH
MS16-032
284
CWE
Product Name: Windows
Affected Version From: Windows 7
Affected Version To: Windows 10, Windows Server 2008, Windows Server 2012
Patch Exists: YES
Related CWE: CVE-2016-0147
CPE: o:microsoft:windows_7::sp1
Platforms Tested: Windows
2016
Invoke-MS16-032
PowerShell implementation of MS16-032. The exploit targets all vulnerable operating systems that support PowerShell v2+. Credit for the discovery of the bug and the logic to exploit it go to James Forshaw (@tiraniddo).
Mitigation:
Apply the latest security updates provided by the vendor.