PT-2017-2004 · Microsoft · Windows 10 1511+5
Simon Zuckerbraun
·
Publicado
2017-04-11
·
Atualizado
2019-10-03
·
CVE-2017-0158
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Windows 10
Windows 10 1511
Windows 8.1
Windows RT 8.1
Windows Server 2012 R2
Description
The issue is related to insufficient access control in the Windows operating system. It allows a remote attacker to elevate their privileges. The vulnerability exists due to the failure to properly sanitize handles in memory. This can enable remote attackers to execute arbitrary code and affect the system.
Recommendations
For Windows 10, update to a version that includes the fix for the "Scripting Engine Memory Corruption Vulnerability".
For Windows 10 1511, apply the necessary security patch to address the memory corruption issue.
For Windows 8.1 and Windows RT 8.1, ensure that all security updates are installed to mitigate the risk of privilege elevation.
For Windows Server 2012 R2, apply the relevant security fix to prevent arbitrary code execution.
As a temporary workaround, consider restricting access to sensitive system resources until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 10
Windows 10 1511
Windows 8.1
Windows Rt 8.1
Windows Server 2012 R2