Kaspersky LabKLA10469KLA10469 Multiple vulnerabilities in Microsoft products
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.91 High
EPSS
Percentile
98.8%
Detect date:
03/10/2015
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct code injection.
Affected products:
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 x86, x64 Service Pack 2
Microsoft Office 2013 x86, x64
Microsoft Office 2013 x86, x64 Service Pack 1
Microsoft SharePoint Server 2010 Service Pack 2
Microsoft SharePoint Server 2013 Service Pack 1
Microsoft SharePoint Server 2013
Microsoft Office Web Apps 2010 Service Pack 2
Microsoft Office Web Apps 2013
Microsoft Office Web Apps 2013 Service Pack 1
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
MS advisory
CVE-2015-1636
CVE-2015-0085
CVE-2015-0086
CVE-2015-1633
CVE-2015-0097
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2015-16363.5Warning
CVE-2015-00859.3Critical
CVE-2015-00869.3Critical
CVE-2015-16333.5Warning
CVE-2015-00979.3Critical
Microsoft official advisories:
KB list:
2956183
2956181
2956180
2880473
2956189
2956188
2881078
2956069
2920812
2889839
2956109
2956103
2956175
2956107
2956106
2956208
2956163
3038999
2956143
2956142
2956076
2881068
2760361
2899580
2760554
2956136
2956151
2956153
2984939
2956158
2956138
2956139
2760508
2920731
2737989
2883100
Exploitation:
Public exploits exist for this vulnerability.
References
support.microsoft.com/kb/2737989
support.microsoft.com/kb/2760361
support.microsoft.com/kb/2760508
support.microsoft.com/kb/2760554
support.microsoft.com/kb/2880473
support.microsoft.com/kb/2881068
support.microsoft.com/kb/2881078
support.microsoft.com/kb/2883100
support.microsoft.com/kb/2889839
support.microsoft.com/kb/2899580
support.microsoft.com/kb/2920731
support.microsoft.com/kb/2920812
support.microsoft.com/kb/2956069
support.microsoft.com/kb/2956076
support.microsoft.com/kb/2956103
support.microsoft.com/kb/2956106
support.microsoft.com/kb/2956107
support.microsoft.com/kb/2956109
support.microsoft.com/kb/2956136
support.microsoft.com/kb/2956138
support.microsoft.com/kb/2956139
support.microsoft.com/kb/2956142
support.microsoft.com/kb/2956143
support.microsoft.com/kb/2956151
support.microsoft.com/kb/2956153
support.microsoft.com/kb/2956158
support.microsoft.com/kb/2956163
support.microsoft.com/kb/2956175
support.microsoft.com/kb/2956180
support.microsoft.com/kb/2956181
support.microsoft.com/kb/2956183
support.microsoft.com/kb/2956188
support.microsoft.com/kb/2956189
support.microsoft.com/kb/2956208
support.microsoft.com/kb/2984939
support.microsoft.com/kb/3038999
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0085
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0086
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0097
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1633
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1636
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0085
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0086
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0097
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-1633
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-1636
statistics.securelist.com/vulnerability-scan/month
technet.microsoft.com/library/security/MS15-022
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Office/
threats.kaspersky.com/en/product/Microsoft-Sharepoint-Server/
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.91 High
EPSS
Percentile
98.8%