PT-2017-2411 · Microsoft · Windows Server 2003+2

Publicado 2017-06-15 · Atualizado 2019-10-03 · CVE-2017-8487

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Windows XP Windows Server 2003

Description The issue is related to insufficient access control in the Windows OLE component, allowing an attacker to execute arbitrary code when a victim opens a specially crafted file or program.

Recommendations For Windows XP, consider applying security patches or updates to fix the issue. For Windows Server 2003, apply the relevant security update to resolve the vulnerability. As a temporary workaround, consider restricting access to potentially vulnerable files or programs until a patch is available.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2017-01614

CVE-2017-8487

Produtos afetados

Windows Ole

Windows Server 2003

Windows Xp

Referências · 6

• 🔥 https://exploit-db.com/exploits/42211 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8487 · Nota de Segurança
• http://securityfocus.com/bid/99013 · Nota
• https://support.microsoft.com/en-us/help/4025218/security-update-for-windows-xp-and-windows-server-2003 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01614 · Nota de Segurança
• http://securitytracker.com/id/1038702 · Nota