PT-2018-1269 · Microsoft · Windows Server 2016+10
Honggang Ren
·
Publicado
2018-04-10
·
Atualizado
2018-05-17
·
CVE-2018-1003
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft JET Database Engine versions prior to the fixed version
Windows 7
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2008
Windows Server 2012
Windows 8.1
Windows Server 2016
Windows Server 2008 R2
Windows 10
Description
The issue is caused by a buffer overflow in the Microsoft JET Database Engine, which could allow a remote attacker to execute arbitrary code on an affected system. This may enable the attacker to perform unauthorized actions.
Recommendations
For Windows 7, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows Server 2012 R2, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows RT 8.1, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows Server 2008, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows Server 2012, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows 8.1, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows Server 2016, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows Server 2008 R2, apply the relevant patch to fix the buffer overflow vulnerability.
For Windows 10, apply the relevant patch to fix the buffer overflow vulnerability.
As a temporary workaround, consider restricting access to the Microsoft JET Database Engine until a patch is available.
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Jet Database Engine
Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016