PT-2017-12256 · Microsoft · Windows Server 2012 R2+5

Published 2017-10-10 · Updated 2019-05-16 · CVE-2017-11818

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server 2012 R2, Windows Server 2016, Windows RT 8.1

Description A security feature bypass issue exists due to the failure of the Microsoft Windows Storage component to validate an integrity-level check. This allows attackers to affect the system.

Recommendations For Microsoft Windows 8.1, consider applying configuration changes to enhance system security until a patch is available. For Windows 10 (Gold, 1511, 1607, 1703), Windows Server 2012 R2, Windows Server 2016, and Windows RT 8.1, apply the recommended security updates to resolve the issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2017-11818

Affected Products

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012 R2

Windows Server 2016

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2017-11818 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11818 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11818 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11818 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11818 · Vendor Advisory
• http://securityfocus.com/bid/101101 · Note
• http://securitytracker.com/id/1039526 · Note