PT-2016-2977

CVE-2016-3270

·

Publicado

2016-10-11

·

Atualizado

2018-10-12

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 10 1703 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold, 1511, and 1607
Description The issue is related to insufficient access restrictions in the Graphics component of the Windows kernel, allowing a remote attacker to potentially elevate privileges using a specially crafted application. This can enable local users to gain privileges, affecting the system.
Recommendations For Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, update to a newer version of Windows to resolve the issue. For other affected versions, update to Windows 10 1703 or later to mitigate the risk. As a temporary workaround, consider restricting access to the Graphics component until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾