HTTP: Microsoft Windows CVE-2016-7225 Arbitrary File Deletion
This signature detects an attempt to exploit a known vulnerability in Microsoft Windows. A successfully exploitation of this issue could lead to arbitrary file deletion.
Extended Description
Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."
Affected Products
Microsoft windows_server_2016
References
CVE: CVE-2016-7225
Short Name
HTTP:STC:DL:CVE-2016-7225-ID
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary CVE-2016-7225 Deletion File Microsoft Windows
Release Date
11/08/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Microsoft
CVSS Score
3.6