Jet Database Engine Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p> <p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p> <p>The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.</p>

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

N/A

Microsoft Windows Jet 安全漏洞

Microsoft Windows Jet是美国微软（Microsoft）公司的一个数据库引擎。该软件应用于优化来用作对Microsoft Access各版本的数据库文件（MDB)文件进行操作，可以被多种编程语言调用或引用进行二次开发。 Microsoft Windows Jet 数据库存在安全漏洞，该漏洞源于不正确地披露其内存中的内容。攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响： Windows 10 1909版本， Windows RT 8.1版本， Windows Server 2016

N/A

其他