PT-2016-1998

CVE-2016-0182

·

Publicado

2016-05-10

·

Atualizado

2018-10-12

Descrição por

CVSS 2.0
9.3
Alta
MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Windows Journal versions in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511
Description The issue is related to insufficient access control in the Windows Journal component, allowing remote attackers to execute arbitrary code by using a specially crafted Journal file. This can affect the system, enabling the execution of arbitrary code.
Recommendations For Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511, consider restricting access to the Journal component until a patch is available. As a temporary workaround, avoid using the Windows Journal component to open specially crafted Journal files until the issue is resolved.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾