Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_7 | Microsoft | * | * |
| Windows_7 | Microsoft | - (including) | - (including) |
| Windows_7 | Microsoft | –sp1 (including) | –sp1 (including) |
| Windows_server_2008 | Microsoft | r2 (including) | r2 (including) |
| Windows_server_2008 | Microsoft | r2-sp1 (including) | r2-sp1 (including) |