PT-2018-1657 · Microsoft · Directx Graphics Kernel+3

Publicado 2018-09-11 · Atualizado 2019-10-03 · CVE-2018-8462

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers

Description The issue is related to the DirectX Graphics Kernel (DXGKRNL) driver improperly handling objects in memory. This can allow an attacker to run processes with elevated privileges.

Recommendations For Windows Server 2016, update the DirectX Graphics Kernel driver to a version that properly handles objects in memory. For Windows 10, update the DirectX Graphics Kernel driver to a version that properly handles objects in memory. For Windows 10 Servers, update the DirectX Graphics Kernel driver to a version that properly handles objects in memory.

Correção

LPE

Buffer Overflow

Improper Resource Release

Enumeração de Fraquezas

CWE-119

CWE-404

Identificadores relacionados

BDU:2018-01216

CVE-2018-8462

Produtos afetados

Directx Graphics Kernel

Windows

Windows 10

Windows Server 2016

Referências · 8

• https://osv.dev/vulnerability/CVE-2018-8462 · Aviso do Fabricante
• http://securityfocus.com/bid/105274 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8462 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8462 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8462 · Nota de Segurança
• http://securitytracker.com/id/1041629 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8462 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01216 · Nota de Segurança