Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11087
HistoryAug 08, 2017 - 12:00 a.m.

KLA11087 Multiple vulnerabilities in Microsoft Windows

2017-08-0800:00:00
Kaspersky Lab
threats.kaspersky.com
71

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.723 High

EPSS

Percentile

98.0%

JSON

Detect date:

08/08/2017

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information.

Affected products:

Windows 7 for 32-bit Systems Service Pack 1
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1511 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows Server 2012
Windows RT 8.1
Windows 10 Version 1607 for x64-based Systems
Windows 10 for 32-bit Systems
Windows Server 2016
Windows Server 2012 (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows Server 2016 (Server Core installation)
Windows Server 2012 R2
Windows 10 for x64-based Systems
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 10 Version 1703 for 32-bit Systems
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows 8.1 for x64-based systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2017-8593
CVE-2017-8591
CVE-2017-8620
CVE-2017-8664
CVE-2017-0250
CVE-2017-8633
CVE-2017-8623
CVE-2017-8622
CVE-2017-8668
CVE-2017-8627
CVE-2017-0293
CVE-2017-0174
CVE-2017-8666
CVE-2017-8673
CVE-2017-8624

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2017-85936.9High
CVE-2017-85917.2High
CVE-2017-86209.3Critical
CVE-2017-86647.2High
CVE-2017-02509.3Critical
CVE-2017-86338.5Critical
CVE-2017-86236.8High
CVE-2017-86227.2High
CVE-2017-86682.1Warning
CVE-2017-86274.7Warning
CVE-2017-02937.6Critical
CVE-2017-01746.1High
CVE-2017-86662.1Warning
CVE-2017-86734.3Warning
CVE-2017-86247.2High

Microsoft official advisories:

KB list:

4034668
4034674
4034681
4034658
4034660
4034666
4034665
4034672
4041689
4041693
4041687
4041676
4041690
4041691
4042895
4041679

References

Related

openvas 15
mskb 28
nessus 9
threatpost 2
thn 1
kaspersky 1
rapid7community 1
qualysblog 1
talosblog 2
trendmicroblog 1
mscve 15
prion 15
symantec 15
cve 15
checkpoint_advisories 2
zdi 4
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4034672)
2017-08-09 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4034681)
2017-08-09 00:00:00
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4034665)
2017-08-09 00:00:00
mskb
mskb
August 8, 2017—KB4034666 (Security-only update)
2017-08-08 07:00:00
August 8, 2017—KB4034672 (Security-only update)
2017-08-08 07:00:00
August 8, 2017—KB4034679 (Security-only update)
2017-08-08 07:00:00
nessus
nessus
Windows Server 2012 August 2017 Security Updates
2017-08-08 00:00:00
Windows 8.1 and Windows Server 2012 R2 August 2017 Security Updates
2017-08-08 00:00:00
Windows 7 and Windows Server 2008 R2 August 2017 Security Updates
2017-08-08 00:00:00
threatpost
threatpost
Microsoft Patches Critical Windows Search Vulnerability
2017-08-08 17:21:17
Windows Search Bug Worth Watching, and Squashing
2017-08-14 15:22:49
thn
thn
Microsoft Issues Security Patches for 25 Critical Vulnerabilities
2017-08-08 08:02:00
kaspersky
kaspersky
KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)
2017-08-08 00:00:00
rapid7community
rapid7community
Patch Tuesday - August 2017
2017-08-08 20:03:46
qualysblog
qualysblog
August Patch Tuesday: 25 critical Microsoft vulnerabilities, 43 for Adobe
2017-08-08 18:25:42
talosblog
talosblog
Microsoft Patch Tuesday - August 2017
2017-08-08 11:30:00
Microsoft Patch Tuesday - September 2017
2017-09-12 15:41:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of August 7, 2017
2017-08-11 16:07:23
mscve
mscve
Windows IME Remote Code Execution Vulnerability
2017-08-08 07:00:00
Win32k Elevation of Privilege Vulnerability
2017-08-08 07:00:00
Windows Hyper-V Remote Code Execution Vulnerability
2017-08-08 07:00:00
prion
prion
Privilege escalation
2017-08-08 21:29:00
Remote code execution
2017-08-08 21:29:00
Remote code execution
2017-08-08 21:29:00
symantec
symantec
Microsoft Windows Hyper-V CVE-2017-8664 Remote Code Execution Vulnerability
2017-08-08 00:00:00
Microsoft Windows Kernel 'Win32k.sys' CVE-2017-8593 Local Privilege Escalation Vulnerability
2017-08-08 00:00:00
Microsoft Windows CVE-2017-8591 Remote Code Execution Vulnerability
2017-08-08 00:00:00
cve
cve
CVE-2017-8664
2017-08-08 21:29:00
CVE-2017-8593
2017-08-08 21:29:00
CVE-2017-8591
2017-08-08 21:29:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Search Type Confusion (CVE-2017-8620)
2017-08-20 00:00:00
Microsoft JET Database Engine Remote Code Execution (CVE-2017-0250)
2017-08-08 00:00:00
zdi
zdi
Microsoft Windows Error Reporting Manager Improper Access Control Privilege Escalation Vulnerability
2017-08-08 00:00:00
Microsoft Windows CLFS Driver Buffer Overflow Privilege Escalation Vulnerability
2017-08-08 00:00:00
Microsoft Windows Jet Engine Library Stack-based Buffer Overflow Remote Code Execution Vulnerability
2017-08-08 00:00:00

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.723 High

EPSS

Percentile

98.0%

JSON
Related for KLA11087
openvas15mskb28nessus9threatpost2thn1kaspersky1rapid7community1qualysblog1talosblog2trendmicroblog1mscve15prion15symantec15cve15checkpoint_advisories2zdi4