PT-2016-2749 · Microsoft · Windows Vista+7
Publicado
2016-09-13
·
Atualizado
2018-10-12
·
CVE-2016-3348
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Vista SP2
Microsoft Windows Server 2008 SP2 and R2 SP1
Microsoft Windows 7 SP1
Microsoft Windows 8.1
Microsoft Windows Server 2012 Gold and R2
Microsoft Windows RT 8.1
Microsoft Windows 10 Gold, 1511, and 1607
Description
The issue is related to the kernel-mode drivers in Microsoft Windows, which have inadequate access restrictions. This allows local users to gain privileges via a crafted application. The vulnerability can be exploited by an attacker to elevate their privileges using a specially crafted application.
Recommendations
For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk.
For Microsoft Windows RT 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows 10 Gold, 1511, and 1607, update to a newer version to mitigate the risk.
As a temporary workaround, consider restricting access to the kernel-mode drivers until a patch is available.
Correção
LPE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2012
Windows Vista