CVE-2016-0190 — Sensitive Information Exposure in Microsoft Windows Server 2012

CWE-200 — Sensitive Information Exposure6 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
2.4%
top 14.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Windows Server 2012Msrc Windows Server 2012Msrc Windows Server 2012 R2
Timeline
PublishedMay 11
Latest updateMay 14

Description

Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka "Remote Desktop Protocol Drive Redirection Information Disclosure Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

🔴Vulnerability Details

1
GHSA
GHSA-784g-f84v-rp63: Volume Manager Driver in Microsoft Windows 8↗2022-05-14
▶

📋Vendor Advisories

1
Microsoft
Remote Desktop Protocol Drive Redirection Information Disclosure Vulnerability↗2016-05-10
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - May 2016↗2016-05-10
▶
Talos
Microsoft Patch Tuesday - May 2016↗2016-05-10
▶

💬Community

1
Bugzilla
CVE-2016-8331 libtiff: FAX IFD Entry Parsing Type Confusion↗2016-10-27
▶