CVE-2016-3298 Microsoft Security Update for Microsoft Internet Messaging API (MS16-126)

2016年10月12日 1727点热度 0人点赞 0条评论

漏洞类别：Windows

漏洞等级：

漏洞信息

An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. The security update affects Microsoft Windows Vista, Windows Server 2008, Windows 7 and Windows Sever 2008 R2 and is rated moderate on client and low on server operating systems.

The update addresses the vulnerability by changing the way the Microsoft Internet Messaging API handles objects in memory.

漏洞危害

An attacker who successfully exploited this vulnerability could test for the presence of files on disk.

解决方案

Customers are advised to refer to Microsoft Advisory MS16-126 for more details.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

MS16-126: Windows Vista Service Pack 2

MS16-126: Windows Vista x64 Edition Service Pack 2

MS16-126: Windows Server 2008 for 32-bit Systems Service Pack 2

MS16-126: Windows Server 2008 for x64-based Systems Service Pack 2

MS16-126: Windows Server 2008 for Itanium-based Systems Service Pack 2

MS16-126: Windows 7 for 32-bit Systems Service Pack 1