Threat Encyclopedia

MS.Windows.JET.CreateLvSMLocs.Code.Execution

description-logoDescription

This indicates attack attempt to exploit a Remote Command Execution vulnerability in Microsoft Windows JET database engine.
A remote attacker could exploit this vulnerability by enticing a victim user to open a maliciously crafted JET database file. Successful exploitation would allow for arbitrary code execution with the privileges of the currently logged-in user.

affected-products-logoAffected Products

Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows 10
Microsoft Windows RT 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2016
Microsoft Windows Server version 1709 (Server Core Installation)
Microsoft Windows Server version 1803 (Server Core Installation)

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Refer to the vendor supplied advisory for updates:
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0577

CVE References

CVE-2019-0577