PT-2016-2570 · Microsoft · Windows+1

Publicado 2016-08-09 · Atualizado 2018-10-12 · CVE-2016-3319

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Edge versions prior to the fixed version Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows 10 Gold and 1511

Description The issue is related to the PDF library in Microsoft Windows and Microsoft Edge, which allows remote attackers to execute arbitrary code via a crafted PDF file. This is due to insufficient access control in the PDF library. The vulnerability can be exploited by a remote attacker to execute arbitrary code on the affected system. If the current user has administrative rights, an attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows 8.1, apply the fix for the Microsoft PDF Remote Code Execution Vulnerability. For Microsoft Windows Server 2012 Gold and R2, apply the fix for the Microsoft PDF Remote Code Execution Vulnerability. For Microsoft Windows 10 Gold and 1511, apply the fix for the Microsoft PDF Remote Code Execution Vulnerability. For Microsoft Edge, apply the fix for the Microsoft PDF Remote Code Execution Vulnerability. As a temporary workaround, consider restricting access to PDF files from untrusted sources until a patch is available.

Correção

RCE

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2016-01962

CVE-2016-3319

Produtos afetados

Edge

Windows

Referências · 12

• http://technet.microsoft.com/library/security/ms16-096 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3319 · Aviso do Fabricante
• https://technet.microsoft.com/library/security/MS16-096 · Nota
• https://bdu.fstec.ru/vul/2016-01962 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3319 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 · Aviso do Fabricante
• https://technet.microsoft.com/library/security/MS16-102 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-102 · Aviso do Fabricante
• http://securityfocus.com/bid/92293 · Nota
• http://securitytracker.com/id/1036561 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3319 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3319 · Nota de Segurança