PT-2019-2990 · Microsoft · Windows Defender
CVE-2019-1161
·
Publicado
2019-08-13
·
Atualizado
2024-05-29
CVSS v2.0
8.5
Alta
| Vetor | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Windows Defender (affected versions not specified)
Description
The issue is related to an elevation of privilege vulnerability in the MpSigStub.exe file for Defender, allowing file deletion in arbitrary locations. To exploit this, an attacker must first log on to the system and then run a specially crafted command. This could lead to the deletion of protected files on an affected system once MpSigStub.exe runs again. The vulnerability is associated with errors in privilege management.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows Defender