PT-2016-1396 · Microsoft · Windows Server 2008 R2 Sp1+5

Publicado 2016-03-09 · Atualizado 2018-10-12 · CVE-2016-0098

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10

Description The issue exists due to insufficient input validation in the Windows operating system, allowing remote attackers to execute arbitrary code via crafted media content.

Recommendations For Windows Server 2008 R2 SP1, update to a newer version that contains a fix for this issue. For Windows 7 SP1, update to a newer version that contains a fix for this issue. For Windows 8.1, update to a newer version that contains a fix for this issue. For Windows Server 2012 Gold and R2, update to a newer version that contains a fix for this issue. For Windows RT 8.1, update to a newer version that contains a fix for this issue. For Windows 10, update to a newer version that contains a fix for this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-00695

CVE-2016-0098

Produtos afetados

Windows 10

Windows 7 Sp1

Windows 8.1

Windows Rt 8.1

Windows Server 2008 R2 Sp1

Windows Server 2012

Referências · 7

• http://securityfocus.com/bid/84089 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0098 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-00695 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0098 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-027 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/MS16-027 · Nota
• http://securitytracker.com/id/1035200 · Nota