PT-2016-1378 · Microsoft · Windows+1
Jaanus Kp
·
Publicado
2016-03-08
·
Atualizado
2018-10-12
·
CVE-2016-0118
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Microsoft Windows 10 Gold and 1511
Description
The issue exists due to insufficient input validation in the PDF library of the Windows operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted PDF document. If successfully exploited, an attacker could cause arbitrary code to execute in the context of the current user. This could lead to an attacker taking control of the affected system, installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. The impact may be less severe for users with fewer user rights on the system.
Recommendations
For Microsoft Windows 10 Gold and 1511, update to a newer version that contains a fix for this issue.
For Microsoft Windows versions prior to the fixed version, update to the fixed version to resolve the issue.
As a temporary workaround, consider avoiding the use of specially crafted PDF documents until a patch is available.
Restrict access to the PDF library to minimize the risk of exploitation.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 10