PT-2019-9249 · Microsoft · Windows 10+3

Published 2019-01-09 · Updated 2019-02-26 · CVE-2018-16183

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 7 (32bit) Windows 7 (64bit) Windows 8 (64bit) Windows 8.1 (64bit) Windows 10 (64bit)

Description The issue is related to an unquoted search path vulnerability in pre-installed applications on Panasonic PCs. This vulnerability allows local users to gain privileges and execute arbitrary code with elevated privileges via a Trojan horse executable file.

Recommendations For Windows 7 (32bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 7 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 8 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 8.1 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk. For Windows 10 (64bit), update to a version with the fix or apply configuration changes to mitigate the risk.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2018-16183

Affected Products

Windows 10

Windows 7

Windows 8

Windows 8.1

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-16183 · Security Note
• https://pc-dl.panasonic.co.jp/dl/docs/077770 · Vendor Advisory
• https://jvn.jp/en/jp/JVN36895151/index.html · Note