PT-2018-1813 · Microsoft · Windows Server 2016+10

Published 2018-11-13 · Updated 2019-10-03 · CVE-2018-8450

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description The issue is related to errors in handling objects in memory by the Windows Search component, allowing a remote attacker to execute arbitrary code using specially crafted messages to the search service, including via SMB connections. This can affect the system, enabling remote code execution.

Recommendations For Windows 7, update to a newer version to mitigate the risk. For Windows Server 2012 R2, apply the recommended patch. For Windows RT 8.1, consider disabling the Windows Search service until a patch is available. For Windows Server 2008, restrict access to the SMB connection to minimize the risk of exploitation. For Windows Server 2012, avoid using the vulnerable Windows Search component until the issue is resolved. For Windows 8.1, apply the recommended configuration changes to the Windows Search service. For Windows Server 2016, update to a newer version to mitigate the risk. For Windows Server 2008 R2, consider temporarily disabling the Windows Search service. For Windows 10, apply the recommended patch. For Windows 10 Servers, restrict access to the Windows Search component to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Improper Resource Release

Weakness Enumeration

CWE-119

CWE-404

Related Identifiers

BDU:2018-01413

CVE-2018-8450

Affected Products

Windows

Windows 10

Windows 10 Servers

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8450 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-8450 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8450 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01413 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8450 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8450 · Vendor Advisory
• https://securitylab.ru/vulnerability/496472.php · Note
• https://rapid7.com/db/vulnerabilities/msft-cve-2018-8450 · Note
• http://securitytracker.com/id/1042117 · Note
• http://securityfocus.com/bid/105797 · Note