Test ID:	1.3.6.1.4.1.25623.1.0.812245
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB4054518)
Summary:	This host is missing a critical security; update according to Microsoft KB4054518
Description:	Summary: This host is missing a critical security update according to Microsoft KB4054518 Vulnerability Insight: Multiple flaws exist due to: - An error in RPC if the server has Routing and Remote Access enabled. - Internet Explorer improperly accesses objects in memory. - Internet Explorer improperly handles objects in memory. - Scripting engine handles objects in memory in Microsoft browsers. - Windows its:// protocol handler unnecessarily sends traffic to a remote site in order to determine the zone of a provided URL. Vulnerability Impact: Successful exploitation will allow an attacker who successfully exploited this vulnerability to execute code on the target system, gain the same user rights as the current user, obtain information to further compromise the user's system and could attempt a brute-force attack to disclose the password. Affected Software/OS: - Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 - Microsoft Windows 7 for 32-bit/x64 Systems Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 8.5 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11885 BugTraq ID: 102055 http://www.securityfocus.com/bid/102055 https://www.exploit-db.com/exploits/44616/ http://www.securitytracker.com/id/1039987 Common Vulnerability Exposure (CVE) ID: CVE-2017-11886 BugTraq ID: 102062 http://www.securityfocus.com/bid/102062 http://www.securitytracker.com/id/1039991 Common Vulnerability Exposure (CVE) ID: CVE-2017-11887 BugTraq ID: 102063 http://www.securityfocus.com/bid/102063 http://www.securitytracker.com/id/1039993 Common Vulnerability Exposure (CVE) ID: CVE-2017-11890 BugTraq ID: 102082 http://www.securityfocus.com/bid/102082 https://www.exploit-db.com/exploits/43369/ Common Vulnerability Exposure (CVE) ID: CVE-2017-11894 BugTraq ID: 102053 http://www.securityfocus.com/bid/102053 http://www.securitytracker.com/id/1039990 Common Vulnerability Exposure (CVE) ID: CVE-2017-11895 BugTraq ID: 102054 http://www.securityfocus.com/bid/102054 Common Vulnerability Exposure (CVE) ID: CVE-2017-11901 BugTraq ID: 102046 http://www.securityfocus.com/bid/102046 Common Vulnerability Exposure (CVE) ID: CVE-2017-11903 BugTraq ID: 102047 http://www.securityfocus.com/bid/102047 https://www.exploit-db.com/exploits/43367/ Common Vulnerability Exposure (CVE) ID: CVE-2017-11906 BugTraq ID: 102078 http://www.securityfocus.com/bid/102078 https://www.exploit-db.com/exploits/43372/ Common Vulnerability Exposure (CVE) ID: CVE-2017-11907 BugTraq ID: 102045 http://www.securityfocus.com/bid/102045 https://www.exploit-db.com/exploits/43370/ Common Vulnerability Exposure (CVE) ID: CVE-2017-11912 BugTraq ID: 102092 http://www.securityfocus.com/bid/102092 Common Vulnerability Exposure (CVE) ID: CVE-2017-11913 BugTraq ID: 102091 http://www.securityfocus.com/bid/102091 Common Vulnerability Exposure (CVE) ID: CVE-2017-11919 BugTraq ID: 102093 http://www.securityfocus.com/bid/102093 Common Vulnerability Exposure (CVE) ID: CVE-2017-11927 BugTraq ID: 102095 http://www.securityfocus.com/bid/102095 http://www.securitytracker.com/id/1039997 Common Vulnerability Exposure (CVE) ID: CVE-2017-11930 BugTraq ID: 102058 http://www.securityfocus.com/bid/102058
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.