![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.810909 |
Categoría: | Windows : Microsoft Bulletins |
Título: | Microsoft Silverlight Multiple Remote Code Execution Vulnerabilities (KB4023307) |
Resumen: | This host is missing an important security; update according to Microsoft security update KB4023307. |
Descripción: | Summary: This host is missing an important security update according to Microsoft security update KB4023307. Vulnerability Insight: Multiple flaws exist due to: - The Windows font library improperly handles specially crafted embedded fonts. - The way Windows Uniscribe handles objects in memory. Vulnerability Impact: Successful exploitation allows an attacker to take control of the affected system. An attacker could then install programs. View, change, or delete data or create new accounts with full user rights. Affected Software/OS: Microsoft Silverlight version 5. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-0283 BugTraq ID: 98920 http://www.securityfocus.com/bid/98920 https://www.exploit-db.com/exploits/42234/ https://0patch.blogspot.com/2017/07/0patching-quick-brown-fox-of-cve-2017.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1198 http://www.securitytracker.com/id/1038675 Common Vulnerability Exposure (CVE) ID: CVE-2017-8527 BugTraq ID: 98933 http://www.securityfocus.com/bid/98933 http://www.securitytracker.com/id/1038680 |
Copyright | Copyright (C) 2017 Greenbone AG |
Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |