Intrusion PreventionMS.Windows.Codecs.Library.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Microsoft Windows Server.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted file. An attacker can exploit this to disclose sensitive information on the affected machine via a crafted file.
Affected Products
Microsoft Windows 10
Microsoft Windows Server 2019
Microsoft Windows Server 2019 (Server Core installation)
Microsoft Windows Server version 1709 (Server Core Installation)
Microsoft Windows Server version 1803 (Server Core Installation)
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8506
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2018-12-28 | 13.515 | Default_action:pass:drop |
| 2018-11-16 | 13.492 | Sig Added |
| 2018-11-06 | 13.485 |
| ID | 47041 |
| Created | Nov 19, 2018 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2018-8506 |
| Exploit Prediction Score | 0.43% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |