PT-2017-10433
CVE-2017-0161
·
Publicado
2017-09-12
·
Atualizado
2017-09-21
Descrição por
CVSS 3.1
8.1
AltaMétricasAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Microsoft Windows Server 2008 R2 SP1
Microsoft Windows 7 SP1
Microsoft Windows 8.1
Microsoft Windows Server 2012 Gold and R2
Microsoft Windows RT 8.1
Microsoft Windows 10 versions 1511, 1607, and 1703
Microsoft Windows Server 2016
Description
The issue arises from the Windows NetBT Session Services component failing to maintain certain sequencing requirements, allowing remote code execution. This enables remote attackers to execute arbitrary code and affect the system.
Recommendations
For Microsoft Windows Server 2008 R2 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk.
For Microsoft Windows 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk.
For Microsoft Windows RT 8.1, update to a newer version to mitigate the risk.
For Microsoft Windows 10 versions 1511, 1607, and 1703, update to a newer version to mitigate the risk.
For Microsoft Windows Server 2016, update to a newer version to mitigate the risk.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾