PT-2018-1304 · Microsoft · Windows Server 2016+10

0Xkondara + 1 · Publicado 2018-03-08 · Atualizado 2020-08-24 · CVE-2018-8251

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Media Foundation versions (affected versions not specified) Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description A memory corruption issue exists due to improper handling of objects in memory by Windows Media Foundation. This can be exploited by remote attackers to execute arbitrary code using a specially crafted file or web page.

Recommendations For Windows 7, update to a newer version to mitigate the risk. For Windows Server 2012 R2, apply configuration changes to restrict access to vulnerable components. For Windows RT 8.1, disable the use of specially crafted files until a patch is available. For Windows Server 2012, restrict access to the Media Foundation component to minimize the risk of exploitation. For Windows 8.1, avoid using vulnerable API endpoints until the issue is resolved. For Windows Server 2016, consider disabling the Media Foundation component temporarily as a workaround. For Windows Server 2008 R2, update to a newer version to mitigate the risk. For Windows 10, apply configuration changes to restrict access to vulnerable components. For Windows 10 Servers, restrict access to the Media Foundation component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-787

Identificadores relacionados

BDU:2018-00802

CVE-2018-8251

ZDI-18-579

Produtos afetados

Windows

Windows 10

Windows 10 Servers

Windows 7

Windows 8.1

Windows Media Foundation

Windows Rt 8.1

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Referências · 10

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8251 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8251 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-00802 · Nota de Segurança
• https://xakep.ru/2018/06/14/june-patch-tuesday-2 · Nota
• http://securitytracker.com/id/1041103 · Nota
• https://osv.dev/vulnerability/CVE-2018-8251 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8251 · Nota de Segurança
• http://securityfocus.com/bid/104398 · Nota
• https://zerodayinitiative.com/advisories/ZDI-18-579 · Nota de Segurança