PT-2018-1115 · Microsoft · Windows Server 2012 R2+6

Published 2018-01-03 · Updated 2020-08-24 · CVE-2018-0753

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 versions Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709

Description The issue is caused by a buffer overflow in memory due to the improper handling of objects. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For Windows 8.1 and RT 8.1, update to a newer version to mitigate the risk. For Windows Server 2012 and R2, update to a newer version to mitigate the risk. For Windows 10 versions Gold, 1511, 1607, 1703, and 1709, update to a newer version to mitigate the risk. For Windows Server 2016 and Windows Server, version 1709, update to a newer version to mitigate the risk.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-00529

CVE-2018-0753

Affected Products

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

References · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0753 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0753 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0753 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0753 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00529 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0753 · Vendor Advisory
• http://securitytracker.com/id/1040089 · Note
• http://securityfocus.com/bid/102361 · Note