PT-2018-2117 · Microsoft · Windows Media Player+11

Windowsrcer · Publicado 2018-10-09 · Atualizado 2020-08-24 · CVE-2018-8482

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Media Player versions prior to the fixed version Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description The issue is related to errors in the mechanisms for processing objects in memory in the Windows Media Player component of the Windows operating system. Exploitation of this issue may allow a remote attacker to access confidential information using a specially crafted hyperlink. It is an information disclosure vulnerability that exists when Windows Media Player improperly discloses file information.

Recommendations For Windows Media Player, update to the latest version to resolve the issue. For Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers, apply the recommended security updates to fix the vulnerability. As a temporary workaround, consider restricting access to sensitive information and files that can be accessed through Windows Media Player until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-00069

CVE-2018-8482

Produtos afetados

Windows

Windows 10

Windows 7

Windows 8.1

Windows Media Player

Windows Rt 8.1

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Referências · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8482 · Aviso do Fabricante
• http://securityfocus.com/bid/105469 · Nota
• http://securitytracker.com/id/1041829 · Nota
• https://bdu.fstec.ru/vul/2019-00069 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-8482 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8482 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8482 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8482 · Aviso do Fabricante