ID de Prueba:	1.3.6.1.4.1.25623.1.0.815208
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Multiple Vulnerabilities (KB4503292)
Resumen:	This host is missing a critical security; update according to Microsoft KB4503292
Descripción:	Summary: This host is missing a critical security update according to Microsoft KB4503292 Vulnerability Insight: Multiple flaws exist due to: - Windows Event Viewer (eventvwr.msc) improperly parses XML input containing a reference to an external entity. - Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. - Microsoft Speech API (SAPI) improperly handles text-to-speech (TTS) input. - Windows GDI component improperly discloses the contents of its memory. Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code, elevate privileges by escaping a sandbox, gain access to sensitive information, run processes and delete files and folders in an elevated context. Affected Software/OS: - Microsoft Windows 7 for 32-bit/x64 Systems Service Pack 1 - Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8533 BugTraq ID: 98821 http://www.securityfocus.com/bid/98821 https://www.zerodayinitiative.com/advisories/ZDI-19-581/ Common Vulnerability Exposure (CVE) ID: CVE-2019-0713 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0713 Common Vulnerability Exposure (CVE) ID: CVE-2019-0722 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0722 Common Vulnerability Exposure (CVE) ID: CVE-2019-0888 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0888 Common Vulnerability Exposure (CVE) ID: CVE-2019-0904 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0904 Common Vulnerability Exposure (CVE) ID: CVE-2019-0905 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0905 Common Vulnerability Exposure (CVE) ID: CVE-2019-0906 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0906 https://www.zerodayinitiative.com/advisories/ZDI-19-624/ Common Vulnerability Exposure (CVE) ID: CVE-2019-0907 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0907 Common Vulnerability Exposure (CVE) ID: CVE-2019-0908 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0908 Common Vulnerability Exposure (CVE) ID: CVE-2019-0909 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0909 Common Vulnerability Exposure (CVE) ID: CVE-2019-0920 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0920 https://www.zerodayinitiative.com/advisories/ZDI-19-625/ https://www.zerodayinitiative.com/advisories/ZDI-19-626/ https://www.zerodayinitiative.com/advisories/ZDI-19-627/ https://www.zerodayinitiative.com/advisories/ZDI-19-638/ https://www.zerodayinitiative.com/advisories/ZDI-19-639/ Common Vulnerability Exposure (CVE) ID: CVE-2019-0941 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0941 Common Vulnerability Exposure (CVE) ID: CVE-2019-0943 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0943 Common Vulnerability Exposure (CVE) ID: CVE-2019-0948 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0948 https://www.zerodayinitiative.com/advisories/ZDI-19-641/ Common Vulnerability Exposure (CVE) ID: CVE-2019-0960 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0960 Common Vulnerability Exposure (CVE) ID: CVE-2019-0968 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0968 Common Vulnerability Exposure (CVE) ID: CVE-2019-0972 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0972 Common Vulnerability Exposure (CVE) ID: CVE-2019-0973 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0973 Common Vulnerability Exposure (CVE) ID: CVE-2019-0974 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0974 Common Vulnerability Exposure (CVE) ID: CVE-2019-0977 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0977 Common Vulnerability Exposure (CVE) ID: CVE-2019-0984 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0984 Common Vulnerability Exposure (CVE) ID: CVE-2019-0985 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0985 Common Vulnerability Exposure (CVE) ID: CVE-2019-0986 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0986 Common Vulnerability Exposure (CVE) ID: CVE-2019-0988 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0988 https://www.zerodayinitiative.com/advisories/ZDI-19-723/ Common Vulnerability Exposure (CVE) ID: CVE-2019-1005 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1005 Common Vulnerability Exposure (CVE) ID: CVE-2019-1009 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1009 https://lists.apache.org/thread.html/fb6c84fd387de997e5e366d50b0ca331a328c466432c80f8c5eed33d@%3Cdev.tika.apache.org%3E https://lists.apache.org/thread.html/da9ee189d1756f8508d0f2386d8e25aca5a6df541739829232be8a94@%3Cdev.tika.apache.org%3E https://lists.apache.org/thread.html/39723d8227b248781898c200aa24b154683673287b150a204b83787d@%3Cdev.tika.apache.org%3E Common Vulnerability Exposure (CVE) ID: CVE-2019-1010 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1010 Common Vulnerability Exposure (CVE) ID: CVE-2019-1011 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1011 Common Vulnerability Exposure (CVE) ID: CVE-2019-1012 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1012 Common Vulnerability Exposure (CVE) ID: CVE-2019-1013 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1013 https://www.zerodayinitiative.com/advisories/ZDI-19-573/ https://www.zerodayinitiative.com/advisories/ZDI-19-580/ Common Vulnerability Exposure (CVE) ID: CVE-2019-1014 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1014 Common Vulnerability Exposure (CVE) ID: CVE-2019-1015 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1015 Common Vulnerability Exposure (CVE) ID: CVE-2019-1016 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1016 Common Vulnerability Exposure (CVE) ID: CVE-2019-1017 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1017 Common Vulnerability Exposure (CVE) ID: CVE-2019-1019 http://packetstormsecurity.com/files/153639/Microsoft-Windows-HTTP-To-SMB-NTLM-Reflection-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1019 Common Vulnerability Exposure (CVE) ID: CVE-2019-1025 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1025 Common Vulnerability Exposure (CVE) ID: CVE-2019-1028 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1028 Common Vulnerability Exposure (CVE) ID: CVE-2019-1038 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1038 Common Vulnerability Exposure (CVE) ID: CVE-2019-1039 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1039 Common Vulnerability Exposure (CVE) ID: CVE-2019-1040 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1040 Common Vulnerability Exposure (CVE) ID: CVE-2019-1043 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1043 Common Vulnerability Exposure (CVE) ID: CVE-2019-1045 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1045 Common Vulnerability Exposure (CVE) ID: CVE-2019-1046 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1046 Common Vulnerability Exposure (CVE) ID: CVE-2019-1047 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1047 Common Vulnerability Exposure (CVE) ID: CVE-2019-1048 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1048 Common Vulnerability Exposure (CVE) ID: CVE-2019-1049 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1049 Common Vulnerability Exposure (CVE) ID: CVE-2019-1053 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1053 Common Vulnerability Exposure (CVE) ID: CVE-2019-1055 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1055 Common Vulnerability Exposure (CVE) ID: CVE-2019-1080 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1080 Common Vulnerability Exposure (CVE) ID: CVE-2019-1081 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1081
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.