[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Microsoft JScript Security Feature Bypass Vulnerability - CVE-2018-8417

ID: oval:org.secpod.oval:def:49097Date: (C)2018-11-14   (M)2024-03-06
Class: VULNERABILITYFamily: windows




A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard. To exploit the vulnerability, an attacker would first have to access the local machine, and run a specially crafted application to create arbitrary COM objects. The update addresses the vulnerability by correcting how Microsoft JScript manages COM object creation.

Platform:
Microsoft Windows Server
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows Server 2016
Reference:
CVE-2018-8417
CVE    1
CVE-2018-8417
CPE    18
cpe:/o:microsoft:windows_10
cpe:/o:microsoft:windows_server_2016:::x64
cpe:/o:microsoft:windows_10:1607:::x64
cpe:/o:microsoft:windows_10:1607:::x86
...

© SecPod Technologies