{"uuid": "35cd8857-4dcc-470b-9edc-9835bdad442c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1701", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_051_client_copy_image.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Unknown\", \"hfirefox\", \"OJ Reeves\", \"Spencer McIntyre\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits improper object handling in the win32k.sys kernel mode driver.\\n            This module has been tested on vulnerable builds of Windows 7 x64 and x86, and\\n            Windows 2008 R2 SP1 x64.\", \"disclosure_date\": \"2015-05-12\", \"fullname\": \"exploit/windows/local/ms15_051_client_copy_image\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"Windows ClientCopyImage Win32k Exploit\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/windows/local/ms15_051_client_copy_image.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/local/ms15_051_client_copy_image\", \"references\": [\"CVE-2015-1701\", \"MSB-MS15-051\", \"URL-https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html\", \"URL-https://github.com/hfiref0x/CVE-2015-1701\", \"URL-https://technet.microsoft.com/library/security/MS15-051\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows x86\", \"Windows x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:11.364235Z"}