HTTP: Microsoft Windows JET Database Engine CVE-2019-0576 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Windows JET Database Engine. A successful attack can lead to arbitrary code execution.

Extended Description

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584.

Affected Products

Microsoft windows_server_2016

References

BugTraq: 106422

CVE: CVE-2019-0576

Short Name
HTTP:STC:DL:CVE-2019-0576-RCE
Severity
Critical
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2019-0576 Code Database Engine Execution JET Microsoft Remote Windows bid:106422
Release Date
06/17/2020
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

9.3

Found a potential security threat?