Forest Global Training Partners

Cyber Risks · Cisco Talos

Vulnerability Spotlight: TALOS-2018-0545 - Microsoft wimgapi Load Integrity Info Code Execution Vulnerability

Summary: Marcin Noga of Cisco Talos disclosed a remote code execution vulnerability in Microsoft's wimgapi library, which handles Windows Imaging Format (WIM) files, assigned CVE-2018-8210 and patched in Microsoft's June 2018 Patch Tuesday release. The flaw sits in the LoadIntegrityInfo functions during WIM file header parsing, where heap memory is allocated from a user-controlled size value and another user-controlled value reads bytes into the buffer without prior input checks, allowing code execution at the logged-in user's access rights or a denial-of-service crash.

Bottom line: The bug triggers on the simplest operations, such as an application calling WIMCreateFile to request a handle on a malformed file, so any tool or service that opens WIM images inherits the exposure. WIM files have no registered file type handler by default, so the usual double-click delivery does not apply, but an attacker who registers a handler first changes that.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2018-8210
Related