PT-2017-12263 · Microsoft · Windows Server+3

Publicado 2017-11-14 · Atualizado 2022-05-23 · CVE-2017-11830

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Windows 10 versions Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 Windows Server, version 1709

Description A security feature bypass issue allows an attacker to make an unsigned file appear to be signed. This could potentially affect the system.

Recommendations For Windows 10 versions Gold, 1511, 1607, 1703, and 1709, update to a version that includes the security fix for this issue. For Windows Server 2016 and Windows Server, version 1709, apply the necessary security updates to resolve the security feature bypass vulnerability. As a temporary workaround, consider restricting the execution of unsigned files until a patch is available.

Exploit

Correção

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

CVE-2017-11830

Produtos afetados

Windows

Windows 10

Windows Server

Windows Server 2016

Referências · 8

• 🔥 https://exploit-db.com/exploits/43162 · Exploit
• http://securityfocus.com/bid/101714 · Nota
• https://osv.dev/vulnerability/CVE-2017-11830 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830 · Aviso do Fabricante
• http://securitytracker.com/id/1039790 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11830 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11830 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11830 · Nota de Segurança