Dangerous Clipboard: Analysis of the MS15-072 Patch

By Talos Group This post was authored by Marcin Noga with contributions from Jaeson Schultz . Have you ever thought about how security researchers take a patch that has been released, and then reverse it to find the underlying security issue? Well, back In July Microsoft released security bulletin MS15-072, titled: “Vulnerability in Windows Graphics Component Could Allow Elevation of Privilege (3069392)”. According to Microsoft, this vulnerability “could allow elevation of privilege if the Windows graphics component fails to properly process bitmap conversions.” Talos decided to have […]

Source:: Cisco Security Notice