Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11059
HistoryApr 11, 2017 - 12:00 a.m.

KLA11059 Multiple vulnerabilities in Microsoft Windows

2017-04-1100:00:00
Kaspersky Lab
threats.kaspersky.com
457

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Detect date:

04/11/2017

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, bypass security restrictions, cause denial of service.

Affected products:

Windows 7 for 32-bit Systems Service Pack 1
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows Vista Service Pack 2
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1511 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows Server 2012
Windows RT 8.1
Windows 10 Version 1607 for x64-based Systems
Windows 10 for 32-bit Systems
Windows Server 2012 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows Server 2012 R2
Windows Server 2016 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows 8.1 for x64-based systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2017-0199
CVE-2017-0058
CVE-2017-0155
CVE-2017-0156
CVE-2017-0159
CVE-2017-0164
CVE-2017-0165
CVE-2017-0166
CVE-2017-0167
CVE-2017-0188
CVE-2017-0189
CVE-2017-0191
CVE-2017-0192
CVE-2017-0211
CVE-2017-0158
CVE-2013-6629

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2017-01999.3Critical
CVE-2017-00581.9Warning
CVE-2017-01556.9High
CVE-2017-01566.9High
CVE-2017-01594.3Warning
CVE-2017-01643.5Warning
CVE-2017-01657.2High
CVE-2017-01669.3Critical
CVE-2017-01672.1Warning
CVE-2017-01882.1Warning
CVE-2017-01897.2High
CVE-2017-01913.5Warning
CVE-2017-01924.3Warning
CVE-2017-02114.3Warning
CVE-2017-01587.6Critical
CVE-2013-66295.0Critical

Microsoft official advisories:

KB list:

4015550
4015221
4015551
4015219
4015548
4014793
4015217
4015583
4015068
4015195
4015380
4015547
4015067
4014652
4014794
4015383

Exploitation:

This vulnerability can be exploited by the following malware:

References

Related

nessus 22
mskb 23
kaspersky 2
openvas 25
cve 14
prion 13
symantec 13
veracode 1
oraclelinux 1
ubuntucve 1
mscve 13
redhat 1
zdt 8
centos 1
f5 2
slackware 1
debiancve 1
checkpoint_advisories 8
seebug 2
zdi 1
threatpost 7
fireeye 5
malwarebytes 6
cisa_kev 1
thn 5
saint 2
myhack58 6
metasploit 1
packetstorm 3
talosblog 2
securelist 5
exploitpack 1
attackerkb 1
ics 1
nessus
nessus
KB4015221: Windows 10 Version 1507 April 2017 Cumulative Update
2017-04-11 00:00:00
KB4015217: Windows 10 1607 April 2017 Cumulative Update
2017-04-11 00:00:00
Windows 7 and Windows 2008 R2 April 2017 Security Updates (Petya)
2017-04-12 00:00:00
mskb
mskb
April 11, 2017—KB4015546 (Security-only update)
2017-04-11 07:00:00
April 11, 2017—KB4015549 (Monthly Rollup)
2017-04-11 07:00:00
April 11, 2017—KB4015547 (Security-only update)
2017-04-11 07:00:00
kaspersky
kaspersky
KLA11835 Multiple vulnerabilities in Microsoft Products (ESU)
2017-04-11 00:00:00
KLA11061 Information disclosure vulnerability in Microsoft Windows
2017-04-11 00:00:00
openvas
openvas
Microsoft Windows Monthly Rollup (KB4015549)
2017-04-12 00:00:00
Microsoft Windows Monthly Rollup (KB4015550)
2017-04-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4015221)
2017-04-13 00:00:00
cve
cve
CVE-2017-0189
2017-04-12 14:59:00
CVE-2017-0188
2017-04-12 14:59:00
CVE-2013-6629
2013-11-19 04:50:00
prion
prion
Privilege escalation
2017-04-12 14:59:00
Information disclosure
2017-04-12 14:59:00
Denial of service
2017-04-12 14:59:00
symantec
symantec
Microsoft Windows Active Directory CVE-2017-0164 Denial of Service Vulnerability
2017-04-11 00:00:00
libjpeg/libjpeg-turbo Library CVE-2013-6629 Memory Corruption Vulnerability
2013-11-12 00:00:00
Microsoft Windows Kernel 'Win32k.sys' CVE-2017-0058 Local Information Disclosure Vulnerability
2017-04-11 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 08:53:01
oraclelinux
oraclelinux
libjpeg security update
2013-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2013-6629
2013-11-18 00:00:00
mscve
mscve
libjpeg Information Disclosure Vulnerability
2017-04-11 07:00:00
Windows Kernel Information Disclosure Vulnerability
2017-04-11 07:00:00
Win32k Elevation of Privilege Vulnerability
2017-04-11 07:00:00
redhat
redhat
(RHSA-2013:1804) Moderate: libjpeg security update
2013-12-09 00:00:00
zdt
zdt
Microsoft Windows Kernel - win32kfull!SfnINLPUAHDRAWMENUITEM Stack Memory Disclosure Exploit
2017-04-13 00:00:00
Microsoft Windows Kernel win32k.sys - Multiple Bugs in the NtGdiGetDIBitsInternal System Call Exploi
2017-04-13 00:00:00
Microsoft Windows 10 (Build 10586) - IEETWCollector Arbitrary Directory/File Deletion Privilege Esca
2017-04-21 00:00:00
centos
centos
libjpeg security update
2013-12-10 00:47:48
f5
f5
SOL59503294 - libjpeg vulnerability CVE-2013-6629
2016-02-19 00:00:00
K59503294 : libjpeg vulnerability CVE-2013-6629
2016-02-19 00:00:00
slackware
slackware
[slackware-security] libjpeg
2013-12-17 03:49:12
debiancve
debiancve
CVE-2013-6629
2013-11-19 04:50:00
checkpoint_advisories
checkpoint_advisories
Microsoft Win32k Elevation of Privilege (CVE-2017-0189)
2017-04-11 00:00:00
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-0158)
2017-04-11 00:00:00
Microsoft Win32k Information Disclosure (CVE-2017-0188)
2017-04-11 00:00:00
seebug
seebug
Windows Kernel stack memory disclosure in win32kfull!SfnINLPUAHDRAWMENUITEM (CVE-2017-0167)
2017-04-14 00:00:00
Windows Kernel win32k.sys multiple bugs in the NtGdiGetDIBitsInternal system call (CVE-2017-0058)
2017-04-14 00:00:00
zdi
zdi
Microsoft Windows ADO Array-Type Parameter Use-After-Free Information Disclosure Vulnerability
2017-04-11 00:00:00
threatpost
threatpost
Spy Campaign Spams Pro-Tibet Group With ExileRAT
2019-02-04 20:45:00
AZORult Campaign Adopts Novel Triple-Encryption Technique
2020-02-03 20:58:25
APT36 Taps Coronavirus as 'Golden Opportunity' to Spread Crimson RAT
2020-03-17 15:07:38
fireeye
fireeye
CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
2017-04-11 13:30:00
Petya Destructive Malware Variant Spreading via Stolen Credentials and EternalBlue Exploit
2017-06-27 17:30:00
CVE-2017-0199 Used as Zero Day to Distribute FINSPY Espionage Malware and LATENTBOT Cyber Crime Malware
2017-04-12 11:00:00
malwarebytes
malwarebytes
Blocks for Flash and others coming to Office 365
2018-06-01 15:00:00
APT36 jumps on the coronavirus bandwagon, delivers Crimson RAT
2020-03-16 15:00:00
Magecart Group 4: A link with Cobalt Group?
2019-10-03 15:00:00
cisa_kev
cisa_kev
Microsoft Office and WordPad Remote Code Execution Vulnerability
2021-11-03 00:00:00
thn
thn
Indian-Made Mobile Spyware Targeted Human Rights Activist in Togo
2021-10-11 09:21:00
Petya Ransomware Spreading Rapidly Worldwide, Just Like WannaCry
2017-06-27 03:32:00
Not Just Criminals, But Governments Were Also Using MS Word 0-Day Exploit
2017-04-12 21:41:00
saint
saint
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 00:00:00
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 00:00:00
myhack58
myhack58
CVE-2017-0199: analysis Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net
2017-04-13 00:00:00
A newline character causes the Oscar vulnerability 0day(CVE-2017-8759)reproduction-latest Office the highest level of threat attack warning-vulnerability warning-the black bar safety net
2017-09-13 00:00:00
CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net
2017-06-08 00:00:00
metasploit
metasploit
Microsoft Office Word Malicious Hta Execution
2017-04-15 02:32:48
packetstorm
packetstorm
Microsoft RTF Remote Code Execution
2017-04-19 00:00:00
Microsoft Office Word Malicious Hta Execution
2017-04-24 00:00:00
Microsoft Word MTA Handler Remote Code Execution
2017-06-27 00:00:00
talosblog
talosblog
New campaign uses government, union-themed lures to deliver Cobalt Strike beacons
2022-09-28 12:12:00
JhoneRAT: Cloud based python RAT targeting Middle Eastern countries
2020-01-19 02:58:29
securelist
securelist
APT Trends report Q3 2017
2017-11-14 09:41:27
The BlueNoroff cryptocurrency hunt is still on
2022-01-13 09:00:23
RevengeHotels: cybercrime targeting hotel front desks worldwide
2019-11-28 10:00:48
exploitpack
exploitpack
Microsoft Word - .RTF Remote Code Execution
2017-04-18 00:00:00
attackerkb
attackerkb
CVE-2017-0199
2017-04-12 00:00:00
ics
ics
Dridex Malware
2020-06-30 12:00:00

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for KLA11059
nessus22mskb23kaspersky2openvas25cve14prion13symantec13veracode1oraclelinux1ubuntucve1mscve13redhat1zdt8centos1f52slackware1debiancve1checkpoint_advisories8seebug2zdi1threatpost7fireeye5malwarebytes6cisa_kev1thn5saint2myhack586metasploit1packetstorm3talosblog2securelist5exploitpack1attackerkb1ics1