Microsoft advisory MS15-074 is not covered within a Secunia Advisory

[#1]

Summary

Secunia Research has rejected Microsoft advisory MS15-074.

Synopsis

Microsoft advisory MS15-074 is not covered within a Secunia Advisory.

References:
https://technet.microsoft.com/en-us/library/security/MS15-074

Reason :

The sole issue (CVE-2015-2371) is rejected due to requiring another vulnerability or requiring a violation of security best practices

Discussion

Reason for Rating:

The outlined exploitation scenario requires an initial compromise of a user of a system, then the existence and use of a vulnerable .msi package on said system, and finally the existence of further malicious code that will be executed by the previously mentioned .msi package. Such a scenario requires at least another vulnerability and potentially various security best practice violations and is therefore considered unrealistic.