Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10470
HistoryMar 10, 2015 - 12:00 a.m.

KLA10470 Multiple vulnerabilities in Microsoft products

2015-03-1000:00:00
Kaspersky Lab
threats.kaspersky.com
112

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%

JSON

Detect date:

03/10/2015

Severity:

Critical

Description:

Multiple critical vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privilleges.

Affected products:

Windows Server 2003 x86, x64, for Itanium-based Systems Service Pack 2
Windows Vista x86, x64 Service Pack 2
Windows Server 2008 x86, x64, for Itanium-based Systems Service Pack 2
Windows 7 x86, x64 Service Pack 1
Windows Server 2012, 2012 R2
Windows RT, RT 8.1

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

MS bulletin
CVE-2015-0096
CVE-2015-0081

Impacts:

ACE

Related products:

Microsoft Windows Vista

CVE-IDS:

CVE-2015-00969.3Critical
CVE-2015-00819.3Critical

Microsoft official advisories:

KB list:

3033889
3039066
3041836

References

Related

openvas 1
mskb 1
nessus 1
symantec 2
checkpoint_advisories 2
canvas 1
zdi 2
metasploit 4
cve 2
myhack58 2
prion 2
zdt 2
packetstorm 4
threatpost 2
exploitpack 2
trendmicroblog 1
exploitdb 2
cert 1
talosblog 1
securityvulns 1
openvas
openvas
Microsoft Windows Remote Code Execution Vulnerabilities (3041836)
2015-03-11 00:00:00
mskb
mskb
MS15-020: Vulnerabilities in Windows could allow remote code execution: March 10, 2015
2015-03-10 00:00:00
nessus
nessus
MS15-020: Vulnerabilities in Microsoft Windows Could Allow Remote Code Execution (3041836) (EASYHOOKUP)
2015-03-10 00:00:00
symantec
symantec
Microsoft Windows Text Services CVE-2015-0081 Remote Code Execution Vulnerability
2015-03-10 00:00:00
Microsoft Windows DLL Loading CVE-2015-0096 Remote Code Execution Vulnerability
2015-03-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Text Services Remote Code Execution (MS15-020; CVE-2015-0081)
2015-03-10 00:00:00
Microsoft DLL Planting Remote Code Execution (MS15-020; CVE-2015-0096)
2015-03-10 00:00:00
canvas
canvas
Immunity Canvas: LNK_EXEC
2015-03-11 10:59:00
zdi
zdi
Microsoft Windows .LNK DLL Planting Remote Code Execution Vulnerability
2015-03-11 00:00:00
Microsoft Windows Text Services Out-Of-Bounds Memory Access Remote Code Execution Vulnerability
2015-03-10 00:00:00
metasploit
metasploit
Microsoft Windows Shell LNK Code Execution
2015-03-12 04:46:50
Microsoft Windows Shell LNK Code Execution
2015-03-11 22:29:02
LNK Code Execution Vulnerability
2017-10-05 14:16:31
cve
cve
CVE-2015-0081
2015-03-11 10:59:00
CVE-2015-0096
2015-03-11 10:59:00
myhack58
myhack58
[CVE-2 0 1 5-0 0 9 6]Microsoft Windows Shell SMB LNK Code Execution Exploit-vulnerability warning-the black bar safety net
2015-03-21 00:00:00
β€œThe seismic network of the third generationβ€οΌˆCVE-2017-8464 several species using the method and prevention-vulnerability and early warning-the black bar safety net
2017-08-07 00:00:00
prion
prion
Remote code execution
2015-03-11 10:59:00
Remote code execution
2015-03-11 10:59:00
zdt
zdt
Microsoft Windows Shell File Format LNK Code Execution Exploit
2015-03-12 00:00:00
Microsoft Windows Shell SMB LNK Code Execution Exploit
2015-03-12 00:00:00
packetstorm
packetstorm
Microsoft Windows Shell SMB LNK Code Execution
2015-03-12 00:00:00
Microsoft Windows Shell File Format LNK Code Execution
2015-03-12 00:00:00
Microsoft Windows LNK Shortcut File Code Execution
2017-08-01 00:00:00
threatpost
threatpost
Patched Windows Machines Exposed to Stuxnet LNK Flaw All Along
2015-03-10 13:00:57
Details Surface on Stuxnet Patch Bypass
2015-03-11 13:01:47
exploitpack
exploitpack
Microsoft Windows - .LNK Shortcut File Code Execution (Metasploit)
2017-07-26 00:00:00
Microsoft Windows - .LNK Shortcut File Code Execution
2017-08-06 00:00:00
trendmicroblog
trendmicroblog
The Real-World Impact of Bug Bounties and Vulnerability Research
2017-07-06 16:31:43
exploitdb
exploitdb
Microsoft Windows - '.LNK' Shortcut File Code Execution
2017-08-06 00:00:00
Microsoft Windows - '.LNK' Shortcut File Code Execution (Metasploit)
2017-07-26 00:00:00
cert
cert
Microsoft Windows automatically executes code specified in shortcut files
2017-08-03 00:00:00
talosblog
talosblog
Following the LNK metadata trail
2023-01-19 13:00:19
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-04-16 00:00:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%

JSON
Related for KLA10470
openvas1mskb1nessus1symantec2checkpoint_advisories2canvas1zdi2metasploit4cve2myhack582prion2zdt2packetstorm4threatpost2exploitpack2trendmicroblog1exploitdb2cert1talosblog1securityvulns1