PT-2016-2499 · Microsoft · Windows

Published 2016-07-12 · Updated 2018-10-12 · CVE-2016-3258

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to a race condition in the kernel that allows local users to bypass the Low Integrity protection mechanism. This is due to insufficient checking of the resource state when it is possible to share the resource. The exploitation of this issue can allow an attacker to modify files by leveraging unspecified object-manager features.

Recommendations For Microsoft Windows versions prior to the fixed version, consider applying the necessary security updates to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation. Avoid using shared resources in a way that could be exploited by an attacker until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

CWE-264

Related Identifiers

BDU:2016-01890

CVE-2016-3258

Affected Products

Windows

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3258 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-3258 · Security Note
• https://bdu.fstec.ru/vul/2016-01890 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3258 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3258 · Vendor Advisory
• http://technet.microsoft.com/security/bulletin/MS16-092 · Note
• http://securitytracker.com/id/1036289 · Note
• http://securityfocus.com/bid/91606 · Note