Test Kennung:	1.3.6.1.4.1.25623.1.0.902810
Kategorie:	Windows : Microsoft Bulletins
Titel:	Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2660465)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS12-008.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS12-008. Vulnerability Insight: Multiple flaws are due to - An error in win32k.sys when validating input passed from user mode through the kernel component of GDI can be exploited to corrupt memory via a specially crafted web page containing an IFRAME with an overly large 'height' attribute viewed using the Apple Safari browser. - A use-after-free error in win32k.sys when handling certain keyboard layouts can be exploited to dereference already freed memory and gain escalated privileges. Vulnerability Impact: Successful exploitation could allow remote attackers to cause a denial of service and possibly execute arbitrary code with kernel-level privileges. Affected Software/OS: - Microsoft Windows 7 Service Pack 1 and prior - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2003 Service Pack 2 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0154 Cert/CC Advisory: TA12-045A http://www.us-cert.gov/cas/techalerts/TA12-045A.html Microsoft Security Bulletin: MS12-008 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-008 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14928 Common Vulnerability Exposure (CVE) ID: CVE-2011-5046 http://www.exploit-db.com/exploits/18275 http://twitter.com/w3bd3vil/statuses/148454992989261824 http://osvdb.org/77908 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14603 http://www.securitytracker.com/id?1026450 http://secunia.com/advisories/47237 XForce ISS Database: ms-win32k-iframe-code-exec(71873) https://exchange.xforce.ibmcloud.com/vulnerabilities/71873
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.