PT-2017-1626 · Microsoft · Windows

Publicado 2017-03-14 · Atualizado 2019-10-03 · CVE-2017-0050

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to the kernel API in Microsoft Windows, which does not properly enforce permissions. This can be exploited by a local attacker to spoof processes, imitate communication between them, or cause a denial of service using a specially crafted application.

Recommendations For Microsoft Windows versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider restricting access to sensitive system resources to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-00779

CVE-2017-0050

Produtos afetados

Windows

Referências · 8

• http://securityfocus.com/bid/96025 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0050 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0050 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0050 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-00779 · Nota de Segurança
• http://securitytracker.com/id/1038013 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0050 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-0050 · Aviso do Fabricante