Lucene search

[email protected]CVE-2018-0881

HistoryMar 14, 2018 - 5:29 p.m.

CVE-2018-0881

2018-03-1417:29:01

[email protected]

web.nvd.nist.gov

microsoft

video control

windows server

elevation of privilege

vulnerability

cve-2018-0881

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

26.0%

JSON

The Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege due to how objects are handled in memory, aka “Microsoft Video Control Elevation of Privilege Vulnerability”.

Affected configurations

Vulners

NVD

Node

microsoft_corporationwindows_7_sp1\,_windows_server_2008_r2_sp1\,_windows_8.1_and_windows_rt_8.1\,_windows_server_2012_r2\,_windows_10_gold\,_1511\,_1607\,_and_1703\,_and_windows_server_2016Match1709

VendorProductVersionCPE
microsoftwindows_101709cpe:/o:microsoft:windows_10:1709:::
microsoftwindows_101607cpe:/o:microsoft:windows_10:1607:::
microsoftwindows_7-cpe:/o:microsoft:windows_7:-:sp1::
microsoftwindows_server1709cpe:/o:microsoft:windows_server:1709:::
microsoftwindows_server_2016-cpe:/o:microsoft:windows_server_2016:-:::
microsoftwindows_10-cpe:/o:microsoft:windows_10:-:::
microsoftwindows_server_2012cpe:/o:microsoft:windows_server_2012::::
microsoftwindows_server_2012r2cpe:/o:microsoft:windows_server_2012:r2:::
microsoftwindows_101703cpe:/o:microsoft:windows_10:1703:::
microsoftwindows_server_2008r2cpe:/o:microsoft:windows_server_2008:r2:sp1::

Vendor	Product	Version	CPE
microsoft	windows_10	1709	cpe:/o:microsoft:windows_10:1709:::
microsoft	windows_10	1607	cpe:/o:microsoft:windows_10:1607:::
microsoft	windows_7	-	cpe:/o:microsoft:windows_7:-:sp1::
microsoft	windows_server	1709	cpe:/o:microsoft:windows_server:1709:::
microsoft	windows_server_2016	-	cpe:/o:microsoft:windows_server_2016:-:::
microsoft	windows_10	-	cpe:/o:microsoft:windows_10:-:::
microsoft	windows_server_2012		cpe:/o:microsoft:windows_server_2012::::
microsoft	windows_server_2012	r2	cpe:/o:microsoft:windows_server_2012:r2:::
microsoft	windows_10	1703	cpe:/o:microsoft:windows_10:1703:::
microsoft	windows_server_2008	r2	cpe:/o:microsoft:windows_server_2008:r2:sp1::

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "product": "Windows",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709"
      }
    ]
  }
]