![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.903501 |
Categoría: | Windows : Microsoft Bulletins |
Título: | Microsoft Windows Ancillary Function Driver Information Disclosure Vulnerability (2875783) |
Resumen: | This host is missing an important security update according to;Microsoft Bulletin MS13-093 |
Descripción: | Summary: This host is missing an important security update according to Microsoft Bulletin MS13-093 Vulnerability Insight: The flaw is due an error in Ancillary Function Driver (AFD) which does not properly copies data from kernel memory to user memory. Vulnerability Impact: Successful exploitation will allow disclosure of potentially sensitive information if an attacker logs on to a user's system and runs a specially crafted application. Affected Software/OS: - Microsoft Windows Server 2012 - Microsoft Windows XP x64 Edition Service Pack 2 and prior - Microsoft Windows 7 x64 Edition Service Pack 1 and prior - Microsoft Windows 2003 x64 Edition Service Pack 2 and prior - Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2013-3887 Cert/CC Advisory: TA13-317A http://www.us-cert.gov/ncas/alerts/TA13-317A Microsoft Security Bulletin: MS13-093 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-093 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18805 |
Copyright | Copyright (C) 2013 Greenbone AG |
Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |