Non notée
CVE-2019-0707 An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys…
Description
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level, aka 'Windows NDIS Elevation of Privilege Vulnerability'.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows Server | 2019 | Pas de correctif indiqué |
| Windows Server | 2016 | Pas de correctif indiqué |
| Windows Server | 2012 | Pas de correctif indiqué |
| Windows | Versions non publiées | |
| Windows 10 Version 1903 for 32-bit Systems | Versions non publiées | |
| Windows 10 Version 1903 for x64-based Systems | Versions non publiées | |
| Windows 10 Version 1903 for ARM64-based Systems | Versions non publiées | |
| Windows Server, version 1903 (Server Core installation) | Versions non publiées |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows Server
Les 831 CVE de Windows Server →
CVE-2020-1468
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Non notée
CVE-2020-1463
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka…
Non notée
CVE-2020-1438
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects…
Non notée
CVE-2020-1436
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted…
Non notée