CVE-2019-0736— Windows DHCP Client Remote Code Execution Vulnerability

Windows DHCP Client Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client. The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Windows和Windows Server DHCP客户端缓冲区错误漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。Windows DHCP Client是其中的一个动态主机IP配置协议客户端。 Microsoft Windows DHCP客户端中存在内存损坏漏洞。攻击者可通过发送特制的DHCP响应利用该漏洞在客户端设备上执行任意代码。以下产品及版本受到影响：

N/A

N/A