PT-2018-9104 · Microsoft · Windows Server 2016+9

Publicado

2018-02-13

·

Atualizado

2019-10-03

·

CVE-2018-0846

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 versions prior to the fixed version, including Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709
Description: The issue is related to how objects in memory are handled by the Windows Common Log File System (CLFS) driver, allowing an elevation of privilege. This could enable attackers to affect the system.
Recommendations: For Windows 7 SP1, update to a newer version to mitigate the risk. For Windows 8.1 and RT 8.1, update to a newer version to mitigate the risk. For Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk. For Windows Server 2012 and R2, update to a newer version to mitigate the risk. For Windows 10 versions prior to the fixed version, including Gold, 1511, 1607, 1703, and 1709, update to a newer version to mitigate the risk. For Windows Server 2016 and Windows Server, version 1709, update to a newer version to mitigate the risk.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2018-0846

Produtos afetados

Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016