description: An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'.
problem types: Elevation of Privilege
affected:
{
product: Microsoft Security Essentials
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft System Center
vendor: Microsoft
versions:
status: affected, version: 2012 Endpoint Protection
status: affected, version: Endpoint Protection
status: affected, version: 2012 R2 Endpoint Protection
}
{
product: Microsoft Forefront Endpoint Protection
vendor: Microsoft
versions:
status: affected, version: 2010
}
{
product: Windows Defender on Windows 7 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: Service Pack 1
}
{
product: Windows Defender on Windows 7 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: Service Pack 1
}
{
product: Windows Defender on Windows Server 2008 R2 for x64-based Systems (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: Service Pack 1
}
{
product: Windows Defender on Windows Server 2008 R2 for Itanium-Based Systems
vendor: Microsoft
versions:
status: affected, version: Service Pack 1
}
{
product: Windows Defender on Windows Server 2008 R2 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: Service Pack 1
}
{
product: Windows Defender on Windows Server 2008 for 32-bit Systems (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: Service Pack 2
}
{
product: Windows Defender on Windows Server 2012
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows Server 2012 (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 8.1 for 32-bit systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 8.1 for x64-based systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows Server 2012 R2
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows RT 8.1
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows Server 2012 R2 (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows Server 2016
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 Version 1607 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 Version 1607 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows Server 2016  (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 Version 1703 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 Version 1703 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 Version 1709 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows 10 Version 1709 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Defender on Windows Server 2008 for Itanium-Based Systems
vendor: Microsoft
versions:
status: affected, version: Service Pack 2
}
{
product: Windows Defender on Windows Server 2008 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: Service Pack 2
}
