PT-2018-9167 · Microsoft · Internet Explorer

Masato Kinugawa · Publicado 2018-07-10 · Atualizado 2019-10-03 · CVE-2018-0949

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11

Description: A security feature bypass issue exists due to Microsoft Internet Explorer's improper handling of requests involving UNC resources. This could allow an attacker to force the browser to load restricted data.

Recommendations: For versions 9 through 11, update to a version that properly handles UNC resource requests to prevent the security feature bypass.

Correção

Identificadores relacionados

CVE-2018-0949

Produtos afetados

Internet Explorer

Referências · 6

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0949 · Aviso do Fabricante
• http://securitytracker.com/id/1041258 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0949 · Nota de Segurança
• http://securityfocus.com/bid/104622 · Nota
• https://osv.dev/vulnerability/CVE-2018-0949 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0949 · Nota de Segurança