PT-2015-2016 · Microsoft · Windows Rt+8

Publicado 2015-09-09 · Atualizado 2019-05-14 · CVE-2015-2519

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to an integer overflow in Windows Journal, allowing remote attackers to execute arbitrary code via a crafted .jnt file. This can be exploited by a remote attacker using a specially formed JNT file, potentially leading to the execution of arbitrary code.

Recommendations For Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10, update to a version that includes the fix for the integer overflow in Windows Journal. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Enumeração de Fraquezas

CWE-190

CWE-189

Identificadores relacionados

BDU:2015-11362

CVE-2015-2519

Produtos afetados

Windows 10

Windows 7

Windows 8

Windows 8.1

Windows Journal

Windows Rt

Windows Server 2008

Windows Server 2012

Windows Vista

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2519 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-11362 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-098 · Aviso do Fabricante
• http://securitytracker.com/id/1033484 · Nota
• http://technet.microsoft.com/security/bulletin/MS15-098 · Nota