Test Kennung:	1.3.6.1.4.1.25623.1.0.902699
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Internet Explorer Remote Code Execution Vulnerability (2794220)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS13-008.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS13-008. Vulnerability Insight: Flaw exists due to the way that Internet Explorer accesses an object that has been deleted or has not been properly allocated and causing use-after-free error when handling the CDwnBindInfo object. Vulnerability Impact: Successful exploitation could will remote attackers to gain sensitive information or execute arbitrary code in the context of the current user. Affected Software/OS: Microsoft Internet Explorer version 6.x/7.x/8.x. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4792 Cert/CC Advisory: TA13-008A http://www.us-cert.gov/cas/techalerts/TA13-008A.html Cert/CC Advisory: TA13-015A http://www.us-cert.gov/cas/techalerts/TA13-015A.html CERT/CC vulnerability note: VU#154201 http://www.kb.cert.org/vuls/id/154201 http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/ http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/ http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb Microsoft Security Bulletin: MS13-008 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361
Copyright	Copyright (C) 2013 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.