PT-2016-1053 · Microsoft · Windows

Publicado 2016-01-12 · Atualizado 2019-05-15 · CVE-2016-0008

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to the graphics device interface in Microsoft Windows, which lacks protection for certain data. This allows a remote attacker to bypass the Address Space Layout Randomization (ASLR) protection mechanism. The vulnerability exists in the way the Windows graphics device interface handles objects in memory, enabling an attacker to retrieve information that could lead to an ASLR bypass.

Recommendations For Microsoft Windows versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the graphics device interface to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2016-00120

CVE-2016-0008

Produtos afetados

Windows

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2016-0008 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/MS16-005 · Nota
• http://technet.microsoft.com/security/bulletin/ms16-005 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0008 · Nota de Segurança
• https://verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1216 · Nota
• https://bdu.fstec.ru/vul/2016-00120 · Nota de Segurança
• http://securitytracker.com/id/1034654 · Nota
• https://osv.dev/vulnerability/CVE-2016-0008 · Aviso do Fabricante