PT-2019-1153 · Microsoft · Windows Server 2016+9
Publicado
2019-01-08
·
Atualizado
2020-08-24
·
CVE-2019-0570
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2012
Windows Server 2019
Windows Server 2016
Windows 8.1
Windows 10
Windows 10 Servers
Description:
The issue arises from the Windows Runtime's improper handling of objects in memory. This can potentially allow an attacker to execute arbitrary code using a specially crafted application. The vulnerability may be exploited to affect the system.
Recommendations:
For Windows Server 2012 R2, update to a version that includes the fix for this issue.
For Windows RT 8.1, update to a version that includes the fix for this issue.
For Windows Server 2012, update to a version that includes the fix for this issue.
For Windows Server 2019, update to a version that includes the fix for this issue.
For Windows Server 2016, update to a version that includes the fix for this issue.
For Windows 8.1, update to a version that includes the fix for this issue.
For Windows 10, update to a version that includes the fix for this issue.
For Windows 10 Servers, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the Windows Runtime until a patch is available.
Exploit
Correção
LPE
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Windows
Windows 10
Windows 10 Servers
Windows 8.1
Windows Rt 8.1
Windows Runtime
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019