Intrusion PreventionMS.NET.Framework.CCalendar.Memory.Corruption
Description
This indicates an attack attempt to exploit a Memory Corruption vulnerability in Microsoft comctrl32 Library.
The vulnerability is due to an error when the vulnerable software attempts to access an object that has been deleted. An attacker can exploit this to elevate their privileges on vulnerable systems.
Affected Products
For Windows Server 2003 Service Pack 2
Microsoft .NET Framework 1.1 Service Pack 1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4
Microsoft .NET Framework 4.5
Microsoft .NET Framework 4.5.1
Microsoft .NET Framework 4.5.2
Impact
Privilege Escalation: Remote attackers can leverage their privileges on the vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://technet.microsoft.com/security/bulletin/MS15-048
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 40530 |
| Created | May 12, 2015 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2015-1673 |
| Exploit Prediction Score | 26.6% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |