Kaspersky LabKLA10714KLA10714 Multiple vulnerabilities in Microsoft Windows
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.963 High
EPSS
Percentile
99.5%
Detect date:
12/08/2015
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service or gain privileges.
Affected products:
Microsoft Windows Vista Service Pack 2
Microsoft Windows Server 2008 Service Pack 2
Microsoft Windows 7 Service Pack 1
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows 10
Microsoft Windows 10 version 1511
Windows Media Center
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2015-6127
CVE-2015-6131
CVE-2015-6130
CVE-2015-6133
CVE-2015-6132
CVE-2015-6126
CVE-2015-6125
CVE-2015-6175
CVE-2015-6174
CVE-2015-6128
CVE-2015-6171
CVE-2015-6173
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2015-61274.3Warning
CVE-2015-61319.3Critical
CVE-2015-61309.3Critical
CVE-2015-61337.2High
CVE-2015-61327.2High
CVE-2015-61267.2High
CVE-2015-61259.3Critical
CVE-2015-61757.2High
CVE-2015-61747.2High
CVE-2015-61287.2High
CVE-2015-61717.2High
CVE-2015-61737.2High
Microsoft official advisories:
KB list:
3108347
3109094
3109103
3116130
3108381
3108371
3116162
3100465
3116900
3116869
3119075
3108670
3108669
Exploitation:
Public exploits exist for this vulnerability.
References
support.microsoft.com/kb/3100465
support.microsoft.com/kb/3108347
support.microsoft.com/kb/3108371
support.microsoft.com/kb/3108381
support.microsoft.com/kb/3108669
support.microsoft.com/kb/3108670
support.microsoft.com/kb/3109094
support.microsoft.com/kb/3109103
support.microsoft.com/kb/3116130
support.microsoft.com/kb/3116162
support.microsoft.com/kb/3116869
support.microsoft.com/kb/3116900
support.microsoft.com/kb/3119075
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6125
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6126
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6127
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6128
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6130
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6131
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6132
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6133
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6171
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6173
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6175
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6125
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6126
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6127
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6128
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6130
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6131
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6132
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6133
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6171
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6173
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6174
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2015-6175
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Windows-10/
threats.kaspersky.com/en/product/Microsoft-Windows-7/
threats.kaspersky.com/en/product/Microsoft-Windows-8/
threats.kaspersky.com/en/product/Microsoft-Windows-Media-Center/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2008/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2012/
threats.kaspersky.com/en/product/Microsoft-Windows-Vista-4/
threats.kaspersky.com/en/product/Windows-RT/
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.963 High
EPSS
Percentile
99.5%