Kaspersky LabKLA10542KLA10542 Multiple vulnerabilities in Microsoft Kernel-Mode Driver
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
14.2%
Detect date:
03/10/2015
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, cause denial of service and obtain sensitive information.
Affected products:
Windows Server 2003 x86, x64, Itamium-based Service Pack 2
Windows Vista x86, x64 Service Pack 2
Windows Server 2008 x86, x64, Itanium-based Service Pack 2
Windows 7 x86, x64 Service Pack 1
Windows Server 2008 R2 x64, Itanium-based Service Pack 1
Windows 8, 8.1 x86, x64
Windows RT, RT 8.1
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
MS15-023
CVE-2015-0077
CVE-2015-0078
CVE-2015-0095
CVE-2015-0094
Impacts:
OSI
Related products:
CVE-IDS:
CVE-2015-00772.1Warning
CVE-2015-00787.2High
CVE-2015-00955.6High
CVE-2015-00942.1Warning
Microsoft official advisories:
KB list:
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
References
support.microsoft.com/kb/3034344
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0077
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0078
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0094
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0095
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0077
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0078
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0094
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-0095
statistics.securelist.com/vulnerability-scan/month
technet.microsoft.com/en-us/library/security/ms15-023.aspx
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Windows-7/
threats.kaspersky.com/en/product/Microsoft-Windows-8/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2003/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2008/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2012/
threats.kaspersky.com/en/product/Microsoft-Windows-Vista-4/
threats.kaspersky.com/en/product/Windows-RT/
Related
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
14.2%