PT-2018-9158 · Microsoft · Windows Server 2016+9
Jun Kokatsu
·
Publicado
2018-03-13
·
Atualizado
2018-04-06
·
CVE-2018-0927
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012, and Windows Server 2012 R2
Microsoft Edge and Internet Explorer versions in Windows 10 Gold, 1511, 1607, 1703, 1709
Windows Server 2016 and Windows Server, version 1709
Description:
An information disclosure issue exists due to how Microsoft browsers handle objects in memory. This could allow an attacker to obtain information, potentially further compromising the user's system.
Recommendations:
For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012, and Windows Server 2012 R2, update to a newer version that includes the fix for this issue.
For Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, update to a newer version that includes the fix for this issue.
For Windows Server 2016 and Windows Server, version 1709, update to a newer version that includes the fix for this issue.
As a temporary workaround, consider restricting access to sensitive information until a patch is available.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Edge
Internet Explorer
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016