#VU22712 Buffer overflow in Windows and Windows Server - CVE-2018-12207

Vulnerability identifier: #VU22712

Vulnerability risk: Low

CVSSv4.0: 2.1 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-12207

CWE-ID: CWE-119

Exploitation vector: Local network

Exploit availability: No

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft

Description

The vulnerability allows a local user to perform denial of service (DoS) attack.

The vulnerability exists due to a boundary error in the mechanism responsible for error handling on some Intel platforms. A local user of a guest operating system can use a specially crafted application to trigger memory corruption and cause the host system to stop responding.

Successful exploitation of this vulnerability may result in a denial of service (DoS) attack.

Below is the list of processor families that are affected by this vulnerability:

Client:

• Intel Core i3 Processors
• Intel Core i5 Processors
• Intel Core i7 Processors
• Intel Core m Processor Family
• 2nd generation Intel Core Processors
• 3rd generation Intel Core Processors
• 4th generation Intel Core Processors
• 5th generation Intel Core Processors
• 6th generation Intel Core Processors
• 7th generation Intel Core Processors
• 8th generation Intel Core Processors
• Intel Core X-series Processor Family
• Intel Pentium Gold Processor Series
• Intel Celeron Processor G Series

Server:

• 2nd Generation Intel Xeon Scalable Processors
• Intel Xeon Scalable Processors
• Intel Xeon Processor E7 v4 Family
• Intel Xeon Processor E7 v3 Family
• Intel Xeon Processor E7 v2 Family
• Intel Xeon Processor E7 Family
• Intel Xeon Processor E5 v4 Family
• Intel Xeon Processor E5 v3 Family
• Intel Xeon Processor E5 v2 Family
• Intel Xeon Processor E5 Family
• Intel Xeon Processor E3 v6 Family
• Intel Xeon Processor E3 v5 Family
• Intel Xeon Processor E3 v4 Family
• Intel Xeon Processor E3 v3 Family
• Intel Xeon Processor E3 v2 Family
• Intel Xeon Processor E3 Family
• Intel Xeon E Processor
• Intel Xeon D Processor
• Intel Xeon W Processor
• Legacy Intel Xeon Processor

Mitigation
Install update from vendor's website.

Vulnerable software versions

Windows: 7, 8.1 RT - 8.1, 10 1607 10.0.14393.10, 10 1709 10.0.16299.19, 10 1803 10.0.17134.48, 10 1809 10.0.17763.1, 10 1903 10.0.18362.116, 10

Windows Server: 2008 R2, 2012 R2 - 2012, 2016 10.0.14393.10, 2019 10.0.17763.1 - 2019 1903

---

External links
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-12207
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.html

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.