Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10656
HistorySep 08, 2015 - 12:00 a.m.

KLA10656 Multiple vulnerabilities in Microsoft Windows

2015-09-0800:00:00
Kaspersky Lab
threats.kaspersky.com
133

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Detect date:

09/08/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Microsoft Windows and related products. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges or execute arbitrary code.

Affected products:

Windows 10
Windows Server 2008 Service Pack 2
Windows Server 2008 R2 Service Pack 1
Windows Server 2012
Windows Server 2012 R2
Windows Vista Service Pack 2
Windows 7 Service Pack 1
Windows 8
Windows 8.1
Windows RT
Windows RT 8.1
Office 2007 Service Pack 3
Office 2010 Service Pack 2
Lync 2013 Service Pack 1
Lync Basic 2013 Service Pack 1
Lync 2010
Lync 2010 Attendee
Live Meeting 2007 Console
Windows Media Center

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2015-2494
CVE-2015-2542
CVE-2015-2486
CVE-2015-2485
CVE-2015-2546
CVE-2015-2535
CVE-2015-2534
CVE-2015-2530
CVE-2015-2529
CVE-2015-2528
CVE-2015-2527
CVE-2015-2525
CVE-2015-2524
CVE-2015-2509
CVE-2015-2517
CVE-2015-2516
CVE-2015-2514
CVE-2015-2513
CVE-2015-2512
CVE-2015-2511
CVE-2015-2510
CVE-2015-2519
CVE-2015-2518
CVE-2015-2506
CVE-2015-2507
CVE-2015-2508

Impacts:

ACE

Related products:

Microsoft Lync

CVE-IDS:

CVE-2015-24949.3Critical
CVE-2015-25429.3Critical
CVE-2015-24869.3Critical
CVE-2015-24859.3Critical
CVE-2015-25466.9High
CVE-2015-25354.0Warning
CVE-2015-25341.9Warning
CVE-2015-25309.3Critical
CVE-2015-25292.1Warning
CVE-2015-25287.2High
CVE-2015-25277.2High
CVE-2015-25257.2High
CVE-2015-25247.2High
CVE-2015-25099.3Critical
CVE-2015-25176.9High
CVE-2015-25164.3Warning
CVE-2015-25149.3Critical
CVE-2015-25139.3Critical
CVE-2015-25127.2High
CVE-2015-25116.9High
CVE-2015-25109.3Critical
CVE-2015-25199.3Critical
CVE-2015-25186.9High
CVE-2015-25069.3Critical
CVE-2015-25077.2High
CVE-2015-25087.2High

Microsoft official advisories:

KB list:

3089657
3087135
3081088
3085500
3084135
3087088
3072595
3081091
3081087
3081090
3081455
3085546
3085529
3089656
3069114
3089669
3082089
3089665
3091287
3087039
3081089
3087918

Exploitation:

Public exploits exist for this vulnerability.

References

Related

mskb 6
openvas 14
nessus 10
attackerkb 2
cve 34
prion 34
securityvulns 1
threatpost 1
symantec 26
zdt 3
talos 1
checkpoint_advisories 6
cisa_kev 1
zdi 2
saint 4
canvas 2
packetstorm 1
kaspersky 2
securelist 1
ubuntucve 1
f5 2
debiancve 1
samba 1
myhack58 1
fireeye 1
osv 1
debian 2
freebsd 1
cisa 1
mskb
mskb
MS15-097: Vulnerabilities in the Microsoft graphics component could allow remote code execution: September 8, 2015
2015-09-08 00:00:00
MS15-098: Vulnerabilities in Windows Journal could allow remote code execution: September 8, 2015
2015-09-08 00:00:00
MS15-095: Cumulative security update for Microsoft Edge: September 8, 2015
2015-09-08 00:00:00
openvas
openvas
Microsoft Windows Graphics Component Remote Code Execution Vulnerability (3089656)
2015-09-09 00:00:00
Microsoft Windows Journal Remote Code Execution Vulnerability (3089669)
2015-09-09 00:00:00
Microsoft Edge Multiple Memory Corruption Vulnerabilities (3089665)
2016-01-08 00:00:00
nessus
nessus
MS15-097: Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3089656)
2015-09-09 00:00:00
MS15-098: Vulnerabilities in Windows Journal Could Allow Remote Code Execution (3089669)
2015-09-09 00:00:00
MS15-095: Cumulative Security Update for Microsoft Edge (3089665)
2015-09-08 00:00:00
attackerkb
attackerkb
CVE-2015-2511
2015-09-09 00:00:00
CVE-2015-2546
2015-09-09 00:00:00
cve
cve
CVE-2015-2546
2015-09-09 00:59:00
CVE-2015-2518
2015-09-09 00:59:00
CVE-2015-2517
2015-09-09 00:59:00
prion
prion
Privilege escalation
2015-09-09 00:59:00
Privilege escalation
2015-09-09 00:59:00
Privilege escalation
2015-09-09 00:59:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-09-15 00:00:00
threatpost
threatpost
September 2015 Microsoft Patch Tuesday Security Bulletins
2015-09-08 15:19:31
symantec
symantec
Microsoft Windows OpenType Fonts CVE-2015-2506 Local Privilege Escalation Vulnerability
2015-09-08 00:00:00
Microsoft Windows Journal CVE-2015-2514 Remote Code Execution Vulnerability
2015-09-08 00:00:00
Microsoft Internet Explorer and Edge CVE-2015-2542 Remote Memory Corruption Vulnerability
2015-09-08 00:00:00
zdt
zdt
Windows 10 kernel buffer overflow in NtGdiBitBlt PoC
2015-09-26 00:00:00
Windows Media Center - Command Execution (MS15-100) Vulnerability
2015-09-12 00:00:00
Microsoft Windows Media Center MCL MS15-100 Vulnerability
2015-09-16 00:00:00
talos
talos
Microsoft Windows CDD Font Parsing Kernel Memory Corruption
2015-09-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows OpenType Font Parsing Denial Of Service (MS15-097: CVE-2015-2506)
2015-09-08 00:00:00
Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2486)
2015-09-08 00:00:00
Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2485)
2015-09-08 00:00:00
cisa_kev
cisa_kev
Microsoft Win32k Memory Corruption Vulnerability
2022-03-15 00:00:00
zdi
zdi
Microsoft Internet Explorer Element ID Use-After-Free Remote Code Execution Vulnerability
2015-09-08 00:00:00
Microsoft Internet Explorer mergeAttributes Type Confusion Remote Code Execution Vulnerability
2015-09-08 00:00:00
saint
saint
Windows Media Center command execution
2015-09-15 00:00:00
Windows Media Center command execution
2015-09-15 00:00:00
Windows Media Center command execution
2015-09-15 00:00:00
canvas
canvas
Immunity Canvas: MS15_102
2015-09-09 00:59:00
Immunity Canvas: MS15_100
2015-09-09 00:59:00
packetstorm
packetstorm
MS15-100 Microsoft Windows Media Center MCL Code Execution
2015-09-15 00:00:00
kaspersky
kaspersky
KLA10660Code execution vulnerability in Microsoft Windows Media Center
2015-09-08 00:00:00
KLA10662 Multiple vulnerabilities in Microsoft Internet Explorer
2015-09-08 00:00:00
securelist
securelist
A Modern Hypervisor as a Basis for a Sandbox
2017-09-19 10:00:02
ubuntucve
ubuntucve
CVE-2015-8467
2015-12-16 00:00:00
f5
f5
K25499204 : Samba vulnerability CVE-2015-8467
2016-10-21 00:00:00
SOL25499204 - Samba vulnerability CVE-2015-8467
2016-10-21 00:00:00
debiancve
debiancve
CVE-2015-8467
2015-12-29 22:59:00
samba
samba
Denial of service attack against Windows
2015-12-16 00:00:00
myhack58
myhack58
HEVD kernel vulnerability training-with Windows play-bug warning-the black bar safety net
2017-03-01 00:00:00
fireeye
fireeye
The EPS Awakens
2015-12-16 08:00:00
osv
osv
samba - security update
2016-01-02 00:00:00
debian
debian
[SECURITY] [DSA 3433-1] samba security update
2016-01-02 09:40:27
[SECURITY] [DSA 3433-1] samba security update
2016-01-02 09:40:27
freebsd
freebsd
samba -- multiple vulnerabilities
2015-12-16 00:00:00
cisa
cisa
CISA Adds 15 Known Exploited Vulnerability to Catalog
2022-03-15 00:00:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for KLA10656
mskb6openvas14nessus10attackerkb2cve34prion34securityvulns1threatpost1symantec26zdt3talos1checkpoint_advisories6cisa_kev1zdi2saint4canvas2packetstorm1kaspersky2securelist1ubuntucve1f52debiancve1samba1myhack581fireeye1osv1debian2freebsd1cisa1