PT-2016-5434 · Microsoft · Windows Vista Sp2+2

Publicado 2016-09-13 · Atualizado 2018-10-12 · CVE-2016-3372

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2

Description The issue is related to the kernel API in Microsoft Windows not properly enforcing permissions. This allows local users to potentially spoof processes, spoof inter-process communication, or cause a denial of service by using a crafted application. An elevation-of-privilege vulnerability is present, which allows attackers to affect the system.

Recommendations For Microsoft Windows Vista SP2 and Windows Server 2008 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-3372

Produtos afetados

Windows Server 2008 R2

Windows Vista Sp2

Windows

Referências · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3372 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3372 · Nota de Segurança
• http://securityfocus.com/bid/92815 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3372 · Aviso do Fabricante
• http://securitytracker.com/id/1036802 · Nota