PT-2018-1879 · Microsoft · Windows 10+10

Dissectmalware · Publicado 2018-11-13 · Atualizado 2018-12-13 · CVE-2018-8415

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PowerShell Core versions 6.0 through 6.1 Windows 7 Windows 8.1 Windows 10 Windows RT 8.1 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019

Description A tampering issue exists that could allow an attacker to execute unlogged code. This is related to errors in processing objects in memory, which may enable a remote attacker to elevate privileges and execute arbitrary code using a specially crafted application.

Recommendations For PowerShell Core versions 6.0 through 6.1, update to a version that includes the fix for this issue. For Windows 7, Windows 8.1, Windows 10, Windows RT 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019, apply the necessary patches or updates to resolve the issue. As a temporary workaround, consider restricting the use of PowerShell until a patch is available.

Correção

Improper Privilege Management

Code Injection

Enumeração de Fraquezas

CWE-269

CWE-94

Identificadores relacionados

BDU:2018-01481

CVE-2018-8415

Produtos afetados

Powershell Core

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Referências · 10

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8415 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-8415 · Aviso do Fabricante
• http://securitytracker.com/id/1042108 · Nota
• https://bdu.fstec.ru/vul/2018-01481 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-8415 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8415 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8415 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8415 · Aviso do Fabricante
• http://securityfocus.com/bid/105792 · Nota
• https://securitylab.ru/vulnerability/496462.php · Nota