製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の Microsoft Windows 製品の User Profile Service における権限昇格の脆弱性

Title	複数の Microsoft Windows 製品の User Profile Service における権限昇格の脆弱性
Summary	複数の Microsoft Windows 製品の User Profile Service (別名 ProfSvc) には、権限を取得される脆弱性が存在します。マイクロソフトセキュリティ情報には、この脆弱性は「Microsoft User Profile Service の特権の昇格の脆弱性」と記載されています。
Possible impacts	ローカルユーザにより、ジャンクション攻撃を実行され、他のユーザの UsrClass.dat レジストリハイブをロードされることで、権限を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 13, 2015, midnight
Registration Date	Jan. 15, 2015, 4:03 p.m.
Last Update	Jan. 15, 2015, 4:03 p.m.

CVSS2.0 : 危険
Score	7.2
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected System

マイクロソフト

Microsoft Windows 7 for 32-bit Systems SP1

Microsoft Windows 7 for x64-based Systems SP1

Microsoft Windows 8 for 32-bit Systems

Microsoft Windows 8 for x64-based Systems

Microsoft Windows 8.1 for 32-bit Systems

Microsoft Windows 8.1 for x64-based Systems

Microsoft Windows RT

Microsoft Windows RT 8.1

Microsoft Windows Server 2003 for Itanium-based Systems SP2

Microsoft Windows Server 2003 SP2

Microsoft Windows Server 2003 x64 Edition SP2

Microsoft Windows Server 2008 for 32-bit Systems SP2

Microsoft Windows Server 2008 for 32-bit Systems SP2 (Server Core インストール)

Microsoft Windows Server 2008 for Itanium-based Systems SP2

Microsoft Windows Server 2008 for x64-based Systems SP2

Microsoft Windows Server 2008 for x64-based Systems SP2 (Server Core インストール)

Microsoft Windows Server 2008 R2 for Itanium-based Systems SP1

Microsoft Windows Server 2008 R2 for x64-based Systems SP1

Microsoft Windows Server 2008 R2 for x64-based Systems SP1 (Server Core インストール)

Microsoft Windows Server 2012

Microsoft Windows Server 2012 (Server Core インストール)

Microsoft Windows Server 2012 R2

Microsoft Windows Server 2012 R2 (Server Core インストール)

Microsoft Windows Vista SP2

Microsoft Windows Vista x64 Edition SP2

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-0004	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0004
National Vulnerability Database (NVD)
2	CVE-2015-0004	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0004

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
Google Code
1	Issue 123: Windows Elevation of Privilege in User Profile Service (MSRC ID 20674)	https://code.google.com/p/google-security-research/issues/detail?id=123
Microsoft Security Bulletin
2	MS15-003	https://technet.microsoft.com/en-us/library/security/ms15-003
マイクロソフトセキュリティ情報
3	MS15-003	https://technet.microsoft.com/ja-jp/library/security/ms15-003

その他

No	Name	URL
IPA 緊急対策情報
1	Microsoft 製品の脆弱性対策について(2015年1月)	http://www.ipa.go.jp/security/ciadr/vul/20150114-ms.html
JPCERT 注意喚起
2	JPCERT-AT-2015-0001	http://www.jpcert.or.jp/at/2015/at150001.html
警察庁 @police
3	マイクロソフト社のセキュリティ修正プログラムについて(MS15-001,002,003,004,005,006,007,008)(2015年01月14日)	http://www.npa.go.jp/cyberpolice/topics/?seq=15213

Change Log

No	Changed Details	Date of change
0	[2015年01月15日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2015-0004

Summary	The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction attack to load another user's UsrClass.dat registry hive, aka MSRC ID 20674 or "Microsoft User Profile Service Elevation of Privilege Vulnerability."
Publication Date	Jan. 14, 2015, 7:59 a.m.
Registration Date	Jan. 26, 2021, 2:43 p.m.
Last Update	Nov. 21, 2024, 11:22 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:microsoft:windows_rt:-:gold::::::
cpe:2.3:o:microsoft:windows_server_2012:-:gold::::::
cpe:2.3:o:microsoft:windows_8.1:-:::::::*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1::::::
cpe:2.3:o:microsoft:windows_7:-:sp1::::::
cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*
cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
cpe:2.3:o:microsoft:windows_8:-:::::::*
cpe:2.3:o:microsoft:windows_server_2012:r2:::::x64::

Related information, measures and tools

No	URL	タグ
1	http://secunia.com/advisories/61927
2	http://secunia.com/advisories/61927
3	http://www.securityfocus.com/bid/71967
4	http://www.securityfocus.com/bid/71967
5	https://code.google.com/p/google-security-research/issues/detail?id=123	Exploit
6	https://code.google.com/p/google-security-research/issues/detail?id=123	Exploit
7	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-003
8	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-003
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/99519
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/99519
11	https://exchange.xforce.ibmcloud.com/vulnerabilities/99520
12	https://exchange.xforce.ibmcloud.com/vulnerabilities/99520

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:microsoft:windows_rt:-:gold::::::
cpe:2.3:o:microsoft:windows_server_2012:-:gold::::::
cpe:2.3:o:microsoft:windows_8.1:-:::::::*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1::::::
cpe:2.3:o:microsoft:windows_7:-:sp1::::::
cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*
cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
cpe:2.3:o:microsoft:windows_8:-:::::::*
cpe:2.3:o:microsoft:windows_server_2012:r2:::::x64::