PT-2018-1115 · Microsoft · Windows Server 2012 R2+6

Publicado 2018-01-03 · Atualizado 2020-08-24 · CVE-2018-0753

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 versions Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709

Description The issue is caused by a buffer overflow in memory due to the improper handling of objects. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For Windows 8.1 and RT 8.1, update to a newer version to mitigate the risk. For Windows Server 2012 and R2, update to a newer version to mitigate the risk. For Windows 10 versions Gold, 1511, 1607, 1703, and 1709, update to a newer version to mitigate the risk. For Windows Server 2016 and Windows Server, version 1709, update to a newer version to mitigate the risk.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2018-00529

CVE-2018-0753

Produtos afetados

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Referências · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0753 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0753 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-0753 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0753 · Aviso do Fabricante
• http://securitytracker.com/id/1040089 · Nota
• https://bdu.fstec.ru/vul/2018-00529 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0753 · Aviso do Fabricante
• http://securityfocus.com/bid/102361 · Nota