HTTP: Microsoft Windows CVE-2016-7224 Information Disclosure

This signature detects an attempt to exploit a known vulnerability in Microsoft Windows. A successfully exploitation of this issue could allow an attacker to arbitrary clone a physical disk leading to information disclosure.

Extended Description

Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."

Affected Products

Microsoft windows_8.1

References

CVE: CVE-2016-7224

Short Name
HTTP:STC:DL:CVE-2016-7224-ID
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-7224 Disclosure Information Microsoft Windows
Release Date
11/08/2016
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

3.6

Found a potential security threat?