SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   OS (Microsoft)  >   Microsoft Task Scheduler Vendors:   Microsoft
Microsoft Windows Task Scheduler Integrity Check Error Lets Local Users Gain Elevated Privileges
SecurityTracker Alert ID:  1030820
SecurityTracker URL:  http://securitytracker.com/id/1030820
CVE Reference:   CVE-2014-4074   (Links to External Site)
Date:  Sep 9 2014
Impact:   Execution of arbitrary code via local system, Root access via local system, User access via local system
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 8, 8.1, 2012, 2012 R2, RT, RT 8.1
Description:   A vulnerability was reported in Microsoft Windows Task Scheduler. A local user can obtain elevated privileges on the target system.

The Windows Task Scheduler does not properly check the integrity of tasks. A local user can run a specially crafted application to execute arbitrary code on the target system with Local System privileges.

James Forshaw of Context Information Security reported this vulnerability.

Impact:   A local user can obtain Local System privileges on the target system.
Solution:   The vendor has issued the following fixes:

Windows 8 for 32-bit Systems:

http://www.microsoft.com/downloads/details.aspx?familyid=f1a17dd4-8bd6-4ec2-a6e8-c95a067fba53

Windows 8 for x64-based Systems:

http://www.microsoft.com/downloads/details.aspx?familyid=cc9b76ec-a613-4b99-b012-5a1904b33646

Windows 8.1 for 32-bit Systems:

http://www.microsoft.com/downloads/details.aspx?familyid=9bb76612-8133-41ad-bf69-fe9652f27448

Windows 8.1 for x64-based Systems:

http://www.microsoft.com/downloads/details.aspx?familyid=20bbef91-a533-474e-8a70-f221adc92932

Windows Server 2012:

http://www.microsoft.com/downloads/details.aspx?familyid=0716ef46-6935-4502-9ae7-e662bbd2882c

Windows Server 2012 R2:

http://www.microsoft.com/downloads/details.aspx?familyid=2cbbd92a-0882-4243-954e-1895ad5dbd05

Windows Server 2012:

http://www.microsoft.com/downloads/details.aspx?familyid=0716ef46-6935-4502-9ae7-e662bbd2882c

Windows Server 2012 R2:

http://www.microsoft.com/downloads/details.aspx?familyid=2cbbd92a-0882-4243-954e-1895ad5dbd05

A restart is required.

The Microsoft advisory is available at:

https://technet.microsoft.com/library/security/ms14-054

Vendor URL:  technet.microsoft.com/library/security/ms14-054 (Links to External Site)
Cause:   Access control error

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC