PT-2015-2016
CVE-2015-2519
·
Publicado
2015-09-09
·
Atualizado
2019-05-14
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Description
The issue is related to an integer overflow in Windows Journal, allowing remote attackers to execute arbitrary code via a crafted .jnt file. This can be exploited by a remote attacker using a specially formed JNT file, potentially leading to the execution of arbitrary code.
Recommendations
For Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10, update to a version that includes the fix for the integer overflow in Windows Journal.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾