PT-2017-12241 · Microsoft · Windows Server 2012 R2+5

Publicado 2017-10-10 · Atualizado 2019-10-03 · CVE-2017-11783

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server versions 2012 R2, 2016, and Windows RT 8.1

Description The issue allows an elevation of privilege due to the way the system handles calls to Advanced Local Procedure Call (ALPC). This enables attackers to affect the system.

Recommendations For Microsoft Windows versions 8.1, 10, Windows Server 2012 R2, 2016, and Windows RT 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2017-11783

Produtos afetados

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012 R2

Windows Server 2016

Referências · 8

• 🔥 https://github.com/Sheisback/CVE-2017-11783 · Exploit
• http://securityfocus.com/bid/101144 · Nota
• https://osv.dev/vulnerability/CVE-2017-11783 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11783 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11783 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11783 · Nota de Segurança
• http://securitytracker.com/id/1039526 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11783 · Aviso do Fabricante