Test Kennung:	1.3.6.1.4.1.25623.1.0.902323
Kategorie:	Windows : Microsoft Bulletins
Titel:	Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (981957)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS10-073.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-073. Vulnerability Insight: The flaw is due to an error in the kernel-mode device driver 'Win32k.sys' - when handling the reference count for an object. - which fails to properly index a table of function pointers when loading a keyboard layout from disk. - which fails to properly manage a window class. Vulnerability Impact: Successful exploitation could allow remote attackers to run arbitrary code in the kernel mode. Affected Software/OS: - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Service Pack 2 and prior - Microsoft Windows Server 2008 Service Pack 2 and prior - Microsoft Windows 7 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2549 BugTraq ID: 41280 http://www.securityfocus.com/bid/41280 Cert/CC Advisory: TA10-285A http://www.us-cert.gov/cas/techalerts/TA10-285A.html http://www.exploit-db.com/exploits/14156 http://seclists.org/fulldisclosure/2010/Jul/3 http://osvdb.org/66003 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12215 http://secunia.com/advisories/40421 XForce ISS Database: ms-win-ntusercheck-priv-escalation(60120) https://exchange.xforce.ibmcloud.com/vulnerabilities/60120 Common Vulnerability Exposure (CVE) ID: CVE-2010-2743 Microsoft Security Bulletin: MS10-073 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-073 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7514 Common Vulnerability Exposure (CVE) ID: CVE-2010-2744 http://www.exploit-db.com/exploits/15894 http://mista.nu/blog/2010/12/01/windows-class-handling-gone-wrong/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12085
Copyright	Copyright (C) 2010 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.