PT-2017-12256 · Microsoft · Windows Server 2012 R2+5

Publicado 2017-10-10 · Atualizado 2019-05-16 · CVE-2017-11818

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server 2012 R2, Windows Server 2016, Windows RT 8.1

Description A security feature bypass issue exists due to the failure of the Microsoft Windows Storage component to validate an integrity-level check. This allows attackers to affect the system.

Recommendations For Microsoft Windows 8.1, consider applying configuration changes to enhance system security until a patch is available. For Windows 10 (Gold, 1511, 1607, 1703), Windows Server 2012 R2, Windows Server 2016, and Windows RT 8.1, apply the recommended security updates to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2017-11818

Produtos afetados

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012 R2

Windows Server 2016

Referências · 7

• http://securityfocus.com/bid/101101 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-11818 · Nota de Segurança
• http://securitytracker.com/id/1039526 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11818 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11818 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11818 · Aviso do Fabricante