Lucene search

K
kasperskyKaspersky LabKLA10467
HistoryMar 10, 2015 - 12:00 a.m.

KLA10467 Denial of service in Microsoft products

2015-03-1000:00:00
Kaspersky Lab
threats.kaspersky.com
102

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%

An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users cause denial of service. This vulnerability can be exploited remotely via a specially desinged RDP requests.

Original advisories

Microsoft bulletin

CVE-2015-0079

Related products

Microsoft-Windows-Server-2012

Microsoft-Windows-8

Microsoft-Windows-7

CVE list

CVE-2015-0079 critical

KB list

3035017

3036493

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Microsoft Windows 7 Serviceย Pack 1Microsoft Windows 8ย Microsoft Windows 8.1Microsoft Windows Server 2012Microsoft windows Server 2012 R2

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.3%