CVE-2016-7237

Related Files

LSASS SMB NTLM Exchange Remote Memory Corruption

Posted Nov 14, 2016

Authored by laurent gaffie

A vulnerability in Windows Local Security Authority Subsystem Service (LSASS) was found on Windows OS versions ranging from Windows XP through to Windows 10. This vulnerability allows an attacker to remotely crash the LSASS.EXE process of an affected workstation with no user interaction. Successful remote exploitation of this issue will result in a reboot of the target machine. Local privilege escalation should also be considered likely. Microsoft acknowledged the vulnerability and has published an advisory (MS16-137) and a patch, resolving this issue.

tags | exploit, remote, local

systems | windows

advisories | CVE-2016-7237

SHA-256 | ede457e2a6d12a01273f1ee5e4c66f2c48cf2de28c09d56c3fd64944958fff14

Download | Favorite | View