PT-2016-2004 · Microsoft · Windows Vista+7

Published 2016-05-10 · Updated 2018-10-12 · CVE-2016-0175

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511

Description The issue allows local users to obtain sensitive information about kernel-object addresses and bypass the KASLR protection mechanism via a crafted application. This is related to a lack of protection for internal data in kernel-mode drivers. The exploitation of this issue can enable a local attacker to gain confidential information and affect the system.

Recommendations For Microsoft Windows Vista SP2, consider applying a patch to fix the kernel-mode driver issue. For Microsoft Windows Server 2008 SP2 and R2 SP1, update the kernel-mode drivers to prevent information disclosure. For Microsoft Windows 7 SP1, apply a security update to address the kernel-object address exposure. For Microsoft Windows 8.1, restrict access to crafted applications that could exploit the kernel-mode driver vulnerability. For Microsoft Windows Server 2012 Gold and R2, implement additional security measures to protect against local attackers exploiting the KASLR bypass. For Microsoft Windows RT 8.1, disable the use of vulnerable font functions until a patch is available. For Microsoft Windows 10 Gold and 1511, update the operating system to a version that includes the fix for the kernel-mode driver information disclosure issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2016-01338

CVE-2016-0175

ZDI-16-281

Affected Products

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2012

Windows Vista

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0175 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0175 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01338 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-16-281 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-062 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-0175 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0175 · Security Note
• http://securityfocus.com/bid/90027 · Note
• http://securitytracker.com/id/1035841 · Note
• http://zerodayinitiative.com/advisories/ZDI-16-281 · Note
• http://technet.microsoft.com/security/bulletin/MS16-062 · Note