PT-2018-2086 · Microsoft · Windows Server 2016+10

Haikuo Xie · Published 2018-10-09 · Updated 2019-10-03 · CVE-2018-8333

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description The issue is related to errors in access restriction in the Filter Manager component of the Microsoft Windows operating system. Exploitation of this issue may allow an attacker to execute arbitrary code and gain control over the vulnerable system by deleting a specific file. It is also mentioned that the vulnerability exists due to improper handling of objects in memory. This can lead to an elevation of privilege, allowing attackers to affect the system.

Recommendations For Windows 7, consider applying security updates related to access control and object handling in memory. For Windows Server 2012 R2, restrict access to sensitive files and directories to minimize the risk of exploitation. For Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers, apply the necessary patches or updates to fix the improper handling of objects in memory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Resource Release

Weakness Enumeration

CWE-264

CWE-404

Related Identifiers

BDU:2019-00037

CVE-2018-8333

ZDI-18-1135

Affected Products

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

References · 9

• https://osv.dev/vulnerability/CVE-2018-8333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00037 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8333 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8333 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8333 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-1135 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-8333 · Security Note
• http://securityfocus.com/bid/105507 · Note
• http://securitytracker.com/id/1041831 · Note