IPS威胁百科

"MS.Windows.NDIS.IOCTL.Pool.Buffer.Overflow"

特征库ID：
43529
漏洞级别：
high
CVE ID：
CVE-2015-6098
建议的动作：
drop
受影响的系统：
Windows
协议：
tcp

攻击漏洞描述

这表明攻击企图利用 Microsoft Windows 中的缓冲区溢出漏洞。该漏洞是由于易受攻击的软件处理恶意制作的文件时发生的错误造成的。攻击者可能能够利用此漏洞通过特制文件在应用程序上下文中执行任意代码。

影响范围

Windows Vista Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for Itanium-based Systems Service Pack 2 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)