PT-2016-1993 · Microsoft · Windows+2

Publicado 2016-05-10 · Atualizado 2018-10-12 · CVE-2016-0188

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 Windows (affected versions not specified)

Description The issue is related to a security feature bypass in the User Mode Code Integrity (UMCI) implementation of Device Guard in Microsoft Internet Explorer 11. This allows remote attackers to bypass a code-signing protection mechanism. Additionally, there is a component in the Windows operating system, specifically the Volume Manager Driver, that is vulnerable due to a lack of user validation for the RemoteFX RDP USB function, potentially allowing a local attacker to read arbitrary files from the disk.

Recommendations For Microsoft Internet Explorer 11, update the User Mode Code Integrity (UMCI) component to properly validate code integrity. For Windows, consider restricting access to the RemoteFX RDP USB function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability in Windows.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2016-01327

CVE-2016-0188

Produtos afetados

Internet Explorer

Internet Explorer 11

Windows

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2016-0188 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0188 · Aviso do Fabricante
• http://technet.microsoft.com/library/security/ms16-051 · Nota
• http://technet.microsoft.com/security/bulletin/MS16-051 · Nota
• http://securitytracker.com/id/1035820 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0188 · Nota de Segurança
• http://securityfocus.com/bid/90003 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01327 · Nota de Segurança