PT-2017-1466 · Microsoft · Windows Server 2012 R2+6
Publicado
2017-03-14
·
Atualizado
2018-10-17
·
CVE-2017-0023
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Edge (affected versions not specified)
Windows 8.1
Windows Server 2012 and R2
Windows RT 8.1
Windows 10 versions 1511 through 1607
Description
The issue is related to a buffer overflow in the memory of the Windows PDF library, allowing remote attackers to execute arbitrary code via a crafted PDF file. This could enable an attacker to take control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights, especially if the current user has administrative privileges.
Recommendations
For Windows 8.1, consider restricting access to PDF files from untrusted sources until a patch is available.
For Windows Server 2012 and R2, restrict the use of the PDF library to minimize the risk of exploitation.
For Windows RT 8.1, avoid opening PDF files from unknown sources in Microsoft Edge.
For Windows 10 versions 1511 through 1607, as a temporary workaround, consider disabling the PDF library in Microsoft Edge until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Edge
Windows
Windows 10
Windows 8.1
Windows Rt 8.1
Windows Server 2012
Windows Server 2012 R2