CVE-2015-6133
Microsoft Windows 8, 8.1, RT, RT 8.1, Server 2012, Server 2012 R2, and 10 - Privilege Escalation via Library Loading
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-6133.
AI-analyzed exploit summary This Metasploit module exploits multiple DLL side-loading vulnerabilities in various COM components by embedding a malicious OLE object in a PPSX file. When opened, the file triggers the loading of a malicious DLL from the current directory, leading to arbitrary code execution.
Description
Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."
Exploits (1)
This Metasploit module exploits multiple DLL side-loading vulnerabilities in various COM components by embedding a malicious OLE object in a PPSX file. When opened, the file triggers the loading of a malicious DLL from the current directory, leading to arbitrary code execution.