PT-2018-1797 · Microsoft · Windows Server 2012 R2+7

Scott Bell · Publicado 2018-11-13 · Atualizado 2020-08-24 · CVE-2018-8563

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2008 R2

Description The issue is related to improper handling of objects in memory by DirectX, which can lead to information disclosure. This can be exploited by an attacker using a specially crafted application to reveal protected information.

Recommendations For Windows 7, update to a newer version that includes the fix for this issue. For Windows Server 2012 R2, apply the necessary patch to resolve the vulnerability. For Windows RT 8.1, Windows Server 2012, Windows 8.1, and Windows Server 2008 R2, ensure that all security updates are installed to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to sensitive information until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2018-01397

CVE-2018-8563

Produtos afetados

Directx

Windows

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Referências · 13

• http://securitylab.ru/vulnerability/496450.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8563 · Nota de Segurança
• http://securityfocus.com/bid/105778 · Nota
• https://cybersecurity-help.cz/vdb/SB2018111318 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8563 · Aviso do Fabricante
• http://securitytracker.com/id/1042135 · Nota
• https://bdu.fstec.ru/vul/2018-01397 · Nota de Segurança
• https://securityfocus.com/bid/105778 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8563 · Aviso do Fabricante
• https://vuldb.com/?id.126737 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8563 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8563 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8563 · Nota