CVE-2016-0190 | BDVDB-2026-75759 Detail

Description#

Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka "Remote Desktop Protocol Drive Redirection Information Disclosure Vulnerability."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-067
http://www.securitytracker.com/id/1035844
http://www.securityfocus.com/bid/90075

Exploit#

No public exploit known

History#

Version 12016-05-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.