PT-2016-2935 · Microsoft · Windows Server 2016+5

Publicado

2016-11-08

·

Atualizado

2018-10-12

·

CVE-2016-7224

CVSS v3.1

6.1

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 (Gold, 1511, and 1607), Windows Server versions 2012 (Gold and R2), 2016, and Windows RT 8.1
Description The Virtual Hard Disk Driver in Microsoft Windows does not properly restrict access to files, allowing local users to gain privileges via a crafted application. This issue may be exploited by an attacker to elevate their privileges on the system.
Recommendations For Microsoft Windows 8.1, update to a version that includes the fix for this issue. For Windows Server 2012 Gold and R2, update to a version that includes the fix for this issue. For Windows 10 Gold, 1511, and 1607, update to a version that includes the fix for this issue. For Windows Server 2016, update to a version that includes the fix for this issue. For Windows RT 8.1, update to a version that includes the fix for this issue.

Exploit

Correção

LPE

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2016-02366
CVE-2016-7224

Produtos afetados

Windows
Windows 10
Windows 8.1
Windows Rt 8.1
Windows Server 2012
Windows Server 2016