| Description: | Summary:
This host is missing a critical security
update according to Microsoft KB4022724
Vulnerability Insight:
Multiple flaws exist due to:
- After installing KB3164035, users cannot print enhanced
metafiles (EMF) or documents containing bitmaps rendered out of bounds using the
BitMapSection(DIBSection) function.
- Updates were not correctly installing all components and would prevent them from
booting.
- An unsupported hardware notification is shown and Windows Updates not scanning,
for systems using the AMD Carrizo DDR4 processor.
- Security updates to Windows kernel, Microsoft Graphics Component, Microsoft
Uniscribe, Windows kernel-mode drivers, the Windows OS, Windows COM, Internet
Explorer and Windows Shell.
Vulnerability Impact:
Successful exploitation will allow attackers
to gain the same user rights as the current user. If the current user is logged
on with administrative user rights, an attacker who successfully exploited the
vulnerability could take control of an affected system. An attacker could then install
programs. View, change, or delete data, or create new accounts with full user rights.
Affected Software/OS:
Microsoft Windows Server 2012.
Solution:
The vendor has released updates. Please see the references for more information.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
