Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10589
HistoryMar 04, 2015 - 12:00 a.m.

KLA10589 Multiple vulnerabilities in Microsoft products

2015-03-0400:00:00
Kaspersky Lab
threats.kaspersky.com
75

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%

JSON

Detect date:

03/04/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, cause denial of service or obtain sensitive information.

Affected products:

Windows Server 2003 x86, x64, Itanium Service Pack 2
Windows Vista x86, x64 Service Pack 2
Windows Server 2008 x86, x64, Itanium Service Pack 2
Windows 7 x86, x64 Service Pack 1
Windows Server 2008 R2 x64, Itanium Service Pack 1
Windows 8 x86, x64
Windows 8.1 x86, x64
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2015-0016
CVE-2015-0062
CVE-2015-0015
CVE-2015-0061
CVE-2015-0004
CVE-2015-0080
CVE-2015-0006
CVE-2015-0005
CVE-2015-0001
CVE-2015-0075
CVE-2015-0073
CVE-2015-0002
CVE-2015-0076
CVE-2015-0084
CVE-2015-0011

Impacts:

OSI

Related products:

Microsoft Windows Vista

CVE-IDS:

CVE-2015-00169.3Critical
CVE-2015-00627.2High
CVE-2015-00157.8High
CVE-2015-00614.3Warning
CVE-2015-00047.2High
CVE-2015-00804.3Warning
CVE-2015-00066.1High
CVE-2015-00054.3Warning
CVE-2015-00011.9Warning
CVE-2015-00757.2High
CVE-2015-00737.2High
CVE-2015-00027.2High
CVE-2015-00764.3Warning
CVE-2015-00842.1Warning
CVE-2015-00114.7Warning

Microsoft official advisories:

KB list:

3019978
3019215
3021674
3038680
3014029
3035132
3023299
3023266
3029944
3020387
3035126
3002657
3025421
3022777
3004365
3031432
3030377
3035131
3020388

Exploitation:

Public exploits exist for this vulnerability.

References

Related

securityvulns 4
openvas 17
mskb 2
nessus 15
cve 16
symantec 15
prion 16
zdt 3
checkpoint_advisories 8
attackerkb 1
packetstorm 3
metasploit 1
cisa_kev 1
exploitdb 1
ubuntucve 1
samba 1
kitploit 1
threatpost 1
debiancve 1
googleprojectzero 1
f5 2
talosblog 1
osv 3
debian 2
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-01-19 00:00:00
Microsoft Network Policy Server DoS
2015-01-19 00:00:00
Microsoft Windows multiple security vulnerabilities
2015-04-16 00:00:00
openvas
openvas
Microsoft Windows Kernel Privilege Elevation Vulnerabilities (3038680)
2015-03-11 00:00:00
Microsoft Windows SHA-2 Code Signing Support Vulnerability (3033929)
2015-03-20 00:00:00
Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerability (3019215)
2015-01-14 00:00:00
mskb
mskb
MS15-025: Vulnerabilities in Windows kernel could allow elevation of privilege: March 10, 2015
2015-03-10 00:00:00
MS15-004: Vulnerability in Windows components could allow elevation of privilege: January 13, 2015
2015-01-13 00:00:00
nessus
nessus
MS15-025: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (3038680)
2015-03-10 00:00:00
MS15-003: Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674)
2015-01-13 00:00:00
MS15-008: Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3019215)
2015-01-13 00:00:00
cve
cve
CVE-2015-0011
2015-01-13 22:59:00
CVE-2015-0004
2015-01-13 22:59:00
CVE-2015-0005
2015-03-11 10:59:00
symantec
symantec
Microsoft Windows Kernel 'mrxdav.sys' CVE-2015-0011 Local Privilege Escalation Vulnerability
2015-01-13 00:00:00
Microsoft Windows CVE-2015-0004 Local Privilege Escalation Vulnerability
2015-01-13 00:00:00
Microsoft Windows CVE-2015-0080 PNG Parsing Information Disclosure Vulnerability
2015-03-10 00:00:00
prion
prion
Privilege escalation
2015-01-13 22:59:00
Privilege escalation
2015-01-13 22:59:00
Directory traversal
2015-01-13 22:59:00
zdt
zdt
Windows 8.1 (32/64 bit) - Privilege Escalation (User Profile Service) (MS15-003)
2015-01-18 00:00:00
MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape Exploit
2015-02-03 00:00:00
Microsoft Windows NtApphelpCacheControl Improper Authorization Check Exploit
2015-01-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Malformed PNG Parsing Information Disclosure (MS15-024; CVE-2015-0080)
2015-03-10 00:00:00
Microsoft Windows NLA Security Feature Bypass (MS15-005; CVE-2015-0006)
2015-01-13 00:00:00
Microsoft Windows Netlogon Spoofing (MS15-027; CVE-2015-0005)
2015-03-10 00:00:00
attackerkb
attackerkb
CVE-2015-0016
2015-01-13 00:00:00
packetstorm
packetstorm
Windows Pass-Through Authentication Methods Improper Validation
2015-03-11 00:00:00
MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape
2015-02-02 00:00:00
Microsoft Windows NtApphelpCacheControl Improper Authorization Check
2015-01-15 00:00:00
metasploit
metasploit
MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape
2015-02-02 01:47:58
cisa_kev
cisa_kev
Microsoft Windows TS WebProxy Directory Traversal Vulnerability
2022-05-25 00:00:00
exploitdb
exploitdb
Microsoft Remote Desktop Services - Web Proxy IE Sandbox Escape (MS15-004) (Metasploit)
2015-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2016-2111
2016-04-12 00:00:00
samba
samba
NETLOGON Spoofing Vulnerability.
2016-04-12 00:00:00
kitploit
kitploit
Impacket - Collection Of Python Classes For Working With Network Protocols
2018-06-19 13:30:00
threatpost
threatpost
January 2015 Microsoft Patch Tuesday Security Bulletins
2015-01-13 14:41:46
debiancve
debiancve
CVE-2016-2111
2016-04-25 00:59:00
googleprojectzero
googleprojectzero
A Token’s Tale
2015-02-09 00:00:00
f5
f5
SOL79401162 - Samba vulnerabilities CVE-2016-2111, CVE-2016-2113, and CVE-2016-2114
2016-05-10 00:00:00
K79401162 : Samba vulnerabilities CVE-2016-2111, CVE-2016-2113, and CVE-2016-2114
2016-05-10 00:00:00
talosblog
talosblog
China Chopper still active 9 years later
2019-08-27 08:14:42
osv
osv
samba - security update
2016-04-13 00:00:00
samba - regression update
2016-04-13 00:00:00
samba - regression update
2016-04-13 00:00:00
debian
debian
[SECURITY] [DSA 3548-1] samba security update
2016-04-13 20:42:21
[SECURITY] [DSA 3548-1] samba security update
2016-04-13 20:42:03

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.921 High

EPSS

Percentile

98.9%

JSON
Related for KLA10589
securityvulns4openvas17mskb2nessus15cve16symantec15prion16zdt3checkpoint_advisories8attackerkb1packetstorm3metasploit1cisa_kev1exploitdb1ubuntucve1samba1kitploit1threatpost1debiancve1googleprojectzero1f52talosblog1osv3debian2