PT-2016-2515 · Microsoft · Windows Rt+8
Publicado
2016-07-12
·
Atualizado
2018-10-12
·
CVE-2016-3239
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Windows Print Spooler versions in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511
Description
The issue is related to insufficient access restrictions in the Windows Print Spooler service, allowing a local attacker to elevate privileges through vectors involving filesystem write operations. This can affect the system, enabling attackers to gain higher privileges.
Recommendations
For Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511, consider restricting access to the Print Spooler service as a temporary workaround until a patch is available. Avoid using filesystem write operations in sensitive contexts until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
LPE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 10
Windows 7
Windows 8.1
Windows Print Spooler
Windows Rt
Windows Server 2008
Windows Server 2012
Windows Vista