ID de Prueba:	1.3.6.1.4.1.25623.1.0.812958
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Information Disclosure and Code Execution Vulnerabilities (KB3086255)
Resumen:	This host is missing a critical security; update according to Microsoft KB3086255
Descripción:	Summary: This host is missing a critical security update according to Microsoft KB3086255 Vulnerability Insight: Multiple flaws exist due to: - An uninitialized kernel pool allocation in IOCTL 0xCA002813. - Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. Vulnerability Impact: Successful exploitation will allow an attacker to run arbitrary code in the kernel user space and leak 16 bits of uninitialized kernel PagedPool data. Affected Software/OS: - Microsoft Windows 8/8.1 x32/x64 - Microsoft Windows 7 x32/x64 Edition Service Pack 1 and prior - Microsoft Windows Vista x32/x64 Edition Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7249 https://github.com/Elvin9/NotSecDrv/blob/master/README.md Common Vulnerability Exposure (CVE) ID: CVE-2018-7250 https://github.com/Elvin9/SecDrvPoolLeak/blob/master/README.md
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.