Test ID:	1.3.6.1.4.1.25623.1.0.810593
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (4013078)
Summary:	This host is missing a critical security; update according to Microsoft Bulletin MS17-012.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS17-012. Vulnerability Insight: Multiple flaws are due to: - The Device Guard does not properly validate certain elements of a signed PowerShell script. - An improper handling of certain requests sent by a malicious SMB server to the client. - Microsoft Windows fails to properly validate input before loading certain dynamic link library (DLL) files. - Windows dnsclient fails to properly handle requests. - A DCOM object in Helppane.exe configured to run as the interactive user fails to properly authenticate the client. - iSNS Server service fails to properly validate input from the client, leading to an integer overflow. Vulnerability Impact: Successful exploitation will allow an attacker to bypass security, obtain sensitive information, run arbitrary code, cause the affected system to stop responding until it is manually restarted, take control of the affected system. An attacker could then: - install programs - view, change, or delete data - create new accounts with full user rights. Affected Software/OS: - Microsoft Windows 8.1 x32/x64 - Microsoft Windows 10 x32/x64 - Microsoft Windows Server 2012/2012R2 - Microsoft Windows 10 Version 1511 x32/x64 - Microsoft Windows 10 Version 1607 x32/x64 - Microsoft Windows Vista x32/x64 Edition Service Pack 2 - Microsoft Windows Server 2008 x32/x64 Edition Service Pack 2 - Microsoft Windows 7 x32/x64 Edition Service Pack 1 - Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 - Microsoft Windows Server 2016 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-0007 BugTraq ID: 96018 http://www.securityfocus.com/bid/96018 https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/ http://www.securitytracker.com/id/1038001 Common Vulnerability Exposure (CVE) ID: CVE-2017-0016 BugTraq ID: 95969 http://www.securityfocus.com/bid/95969 http://www.securitytracker.com/id/1037767 Common Vulnerability Exposure (CVE) ID: CVE-2017-0039 BugTraq ID: 96024 http://www.securityfocus.com/bid/96024 Common Vulnerability Exposure (CVE) ID: CVE-2017-0057 BugTraq ID: 96695 http://www.securityfocus.com/bid/96695 Common Vulnerability Exposure (CVE) ID: CVE-2017-0100 BugTraq ID: 96700 http://www.securityfocus.com/bid/96700 https://www.exploit-db.com/exploits/41607/ http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1021 Common Vulnerability Exposure (CVE) ID: CVE-2017-0104 BugTraq ID: 96697 http://www.securityfocus.com/bid/96697
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.