PT-2019-9249 · Microsoft · Windows 10+3

Publicado 2019-01-09 · Atualizado 2019-02-26 · CVE-2018-16183

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 7 (32bit) Windows 7 (64bit) Windows 8 (64bit) Windows 8.1 (64bit) Windows 10 (64bit)

Description The issue is related to an unquoted search path vulnerability in pre-installed applications on Panasonic PCs. This vulnerability allows local users to gain privileges and execute arbitrary code with elevated privileges via a Trojan horse executable file.

Recommendations For Windows 7 (32bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 7 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 8 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 8.1 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 10 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2018-16183

Produtos afetados

Windows 10

Windows 7

Windows 8

Windows 8.1

Referências · 3

• https://jvn.jp/en/jp/JVN36895151/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-16183 · Nota de Segurança
• https://pc-dl.panasonic.co.jp/dl/docs/077770 · Aviso do Fabricante