FILE Microsoft Windows Shell Zip File Remote Code Execution 2007 (CVE-2018-0883)

Rule ID

1138770

Severity

High

Description

A remote code execution vulnerability has been reported in the Windows Shell component of Microsoft Windows. The vulnerability is due to insufficient handling of paths in zip files.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

File vulnerabilities

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

Windows 10, Windows 7, Windows 8.1, Windows RT 8.1, Windows Server, Windows Server 2008, Windows Server 2012, Windows Server 2016