PT-2015-1289 · Microsoft · Windows Server 2008+6
Publicado
2015-01-13
·
Atualizado
2019-02-26
·
CVE-2015-0014
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Server 2003 SP2
Microsoft Windows Vista SP2
Microsoft Windows Server 2008 SP2 and R2 SP1
Microsoft Windows 7 SP1
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012 Gold and R2
Description
The issue is related to a buffer overflow error in the Telnet service of the Windows operating system. This can be exploited by a remote attacker to execute arbitrary code by sending specially crafted network packets.
Recommendations
For Microsoft Windows Server 2003 SP2, update to a newer version to mitigate the risk.
For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 8, update to a newer version to mitigate the risk.
For Microsoft Windows 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk.
As a temporary workaround, consider disabling the Telnet service until a patch is available.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows 7
Windows 8
Windows 8.1
Windows Server 2003
Windows Server 2008
Windows Server 2012
Windows Vista