PT-2016-2499 · Microsoft · Windows

Publicado 2016-07-12 · Atualizado 2018-10-12 · CVE-2016-3258

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to a race condition in the kernel that allows local users to bypass the Low Integrity protection mechanism. This is due to insufficient checking of the resource state when it is possible to share the resource. The exploitation of this issue can allow an attacker to modify files by leveraging unspecified object-manager features.

Recommendations For Microsoft Windows versions prior to the fixed version, consider applying the necessary security updates to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation. Avoid using shared resources in a way that could be exploited by an attacker until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Enumeração de Fraquezas

CWE-362

CWE-264

Identificadores relacionados

BDU:2016-01890

CVE-2016-3258

Produtos afetados

Windows

Referências · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3258 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-3258 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/MS16-092 · Nota
• https://bdu.fstec.ru/vul/2016-01890 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-3258 · Aviso do Fabricante
• http://securitytracker.com/id/1036289 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3258 · Aviso do Fabricante
• http://securityfocus.com/bid/91606 · Nota