SMB: Microsoft Windows msdaora.dll Insecure Library Loading

This signature detects an attempt to exploit a known Vulnerability in Microsoft Windows Operating System. Successful exploitation could allow an attacker to execute arbitrary code into the application's context.

Extended Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

Affected Products

Microsoft windows_rt_8.1

References

CVE: CVE-2016-0041

URL: https://technet.microsoft.com/en-us/library/security/ms16-014 https://technet.microsoft.com/library/security/ms16-014

Short Name

SMB:FILE:MS-WIN-ILL

Severity

Major

Recommended

True

Recommended Action

Drop

SMB: Microsoft Windows msdaora.dll Insecure Library Loading

Extended Description

Affected Products

References

Found a potential security threat?