Intrusion PreventionMS.Windows.JET.Physical.Index.Out.of.Bounds.Read
Description
This indicates an attack attempt to exploit an Information Disclosure vulnerability in Microsoft Windows JET database engine.
A remote attacker could exploit this vulnerability by enticing a victim user to open a maliciously crafted JET database file. Successful exploitation could result in disclosure of information which could be used to further compromise the target system.
Affected Products
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows 10
Microsoft Windows RT 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server version 1709 (Server Core Installation)
Microsoft Windows Server version 1803 (Server Core Installation)
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
Refer to the vendor supplied advisory for updates:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0575
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-07-03 | 14.642 | Default_action:pass:drop |
| 2019-06-11 | 14.630 | Name:Microsoft. Windows. JET. Physical. Index. Out. of. Bounds. Read:MS. Windows. JET. Physical. Index. Out. of. Bounds. Read |
| 2019-03-06 | 14.566 |
| ID | 47527 |
| Created | Mar 06, 2019 |
| Updated | Jul 02, 2019 |
| Risk |
|
| CVE ID | CVE-2019-0575 |
| Exploit Prediction Score | 1.53% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |