Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.813533
Categoría:Windows : Microsoft Bulletins
Título:Microsoft Windows Multiple Vulnerabilities (KB4284826)
Resumen:This host is missing a critical security; update according to Microsoft KB4284826
Descripción:Summary:
This host is missing a critical security
update according to Microsoft KB4284826

Vulnerability Insight:
Multiple flaws exist due to errors,

- When Internet Explorer improperly accesses objects in memory.

- When the Windows kernel improperly handles objects in memory.

- When Windows improperly handles objects in memory.

- When the (Human Interface Device) HID Parser Library driver improperly handles
objects in memory.

- When NTFS improperly checks access.

- When Windows Media Foundation improperly handles objects in memory.

- In the way that the scripting engine handles objects in memory in Internet
Explorer.

- When the Windows kernel fails to properly handle objects in memory.

- In Windows Domain Name System (DNS) DNSAPI.

- In the way that the Windows Code Integrity Module performs hashing.

Vulnerability Impact:
Successful exploitation will allow an attacker
to obtain information to further compromise the user's system, run processes in
an elevated context, inject code into a trusted PowerShell process, execute
arbitrary code, read privileged data, force the browser to send restricted data,
install programs and create a denial of service condition.

Affected Software/OS:
- Microsoft Windows 7 for 32-bit/x64 Systems Service Pack 1

- Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2018-0978
BugTraq ID: 104364
http://www.securityfocus.com/bid/104364
http://www.securitytracker.com/id/1041099
Common Vulnerability Exposure (CVE) ID: CVE-2018-1036
BugTraq ID: 104360
http://www.securityfocus.com/bid/104360
http://www.securitytracker.com/id/1041111
Common Vulnerability Exposure (CVE) ID: CVE-2018-1040
BugTraq ID: 104389
http://www.securityfocus.com/bid/104389
http://www.securitytracker.com/id/1041112
Common Vulnerability Exposure (CVE) ID: CVE-2018-8169
BugTraq ID: 104356
http://www.securityfocus.com/bid/104356
http://www.securitytracker.com/id/1041093
Common Vulnerability Exposure (CVE) ID: CVE-2018-8205
BugTraq ID: 104391
http://www.securityfocus.com/bid/104391
http://www.securitytracker.com/id/1041114
Common Vulnerability Exposure (CVE) ID: CVE-2018-8207
BugTraq ID: 104379
http://www.securityfocus.com/bid/104379
http://www.securitytracker.com/id/1041113
Common Vulnerability Exposure (CVE) ID: CVE-2018-8224
BugTraq ID: 104381
http://www.securityfocus.com/bid/104381
Common Vulnerability Exposure (CVE) ID: CVE-2018-8225
BugTraq ID: 104395
http://www.securityfocus.com/bid/104395
http://www.securitytracker.com/id/1041095
Common Vulnerability Exposure (CVE) ID: CVE-2018-8249
BugTraq ID: 104363
http://www.securityfocus.com/bid/104363
Common Vulnerability Exposure (CVE) ID: CVE-2018-8251
BugTraq ID: 104398
http://www.securityfocus.com/bid/104398
http://www.securitytracker.com/id/1041103
Common Vulnerability Exposure (CVE) ID: CVE-2018-8267
BugTraq ID: 104404
http://www.securityfocus.com/bid/104404
CopyrightCopyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.