PT-2017-2551 · Microsoft · Windows Rt 8.1+3
Ivan Fratric
·
Publicado
2017-07-11
·
Atualizado
2019-03-26
·
CVE-2017-8594
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Internet Explorer versions on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2
Description
The issue is caused by a memory corruption vulnerability in Internet Explorer, allowing a remote attacker to execute arbitrary code in the context of the current user. This occurs when Internet Explorer improperly accesses objects in memory, potentially corrupting memory and enabling the execution of arbitrary code. If the current user has administrative rights, the attacker could gain control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2, consider restricting access to sensitive data and minimizing the use of administrative user rights until a fix is available. As a temporary workaround, avoid using Internet Explorer for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Internet Explorer
Windows 8.1
Windows Rt 8.1
Windows Server 2012 R2