6.9
CVSSv2

CVE-2015-2371

Published: 14/07/2015 Updated: 08/05/2019
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action script associated with a .msi package, aka "Windows Installer EoP Vulnerability."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows server 2008 -

microsoft windows server 2008 r2

microsoft windows rt -

microsoft windows rt 8.1 -

microsoft windows 2003 server

microsoft windows 2003 server r2

microsoft windows server 2012 -

microsoft windows server 2012 r2

microsoft windows 8 -

microsoft windows 8.1 -

microsoft windows 7 -

microsoft windows vista