Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11111
HistoryOct 10, 2017 - 12:00 a.m.

KLA11111 Multiple vulnerabilities in Microsoft Windows

2017-10-1000:00:00
Kaspersky Lab
threats.kaspersky.com
161

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.799 High

EPSS

Percentile

98.2%

JSON

Detect date:

10/10/2017

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges, bypass security restrictions.

Affected products:

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2012 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 8.1 for x64-based systems
Windows Server 2012
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2016
Windows RT 8.1
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows 10 Version 1703 for x64-based Systems
Windows Server 2012 R2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows 10 Version 1511 for 32-bit Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 10 Version 1703 for 32-bit Systems
Windows Server 2012 R2

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2017-11762
CVE-2017-11763
CVE-2017-11765
CVE-2017-11769
CVE-2017-11771
CVE-2017-11772
CVE-2017-11779
CVE-2017-11780
CVE-2017-11781
CVE-2017-11782
CVE-2017-11783
CVE-2017-11784
CVE-2017-11785
CVE-2017-11814
CVE-2017-11815
CVE-2017-11816
CVE-2017-11817
CVE-2017-11818
CVE-2017-11823
CVE-2017-11824
CVE-2017-11829
CVE-2017-8689
CVE-2017-8693
CVE-2017-8694
CVE-2017-8703
CVE-2017-8715
CVE-2017-8717
CVE-2017-8718
CVE-2017-8727
ADV170012
ADV170014

Impacts:

ACE

Related products:

Microsoft Windows

CVE-IDS:

CVE-2017-117626.8High
CVE-2017-117636.8High
CVE-2017-117652.1Warning
CVE-2017-117699.3Critical
CVE-2017-117725.0Warning
CVE-2017-117799.3Critical
CVE-2017-117806.8High
CVE-2017-117817.8Critical
CVE-2017-117824.6Warning
CVE-2017-117836.9High
CVE-2017-117842.1Warning
CVE-2017-117852.1Warning
CVE-2017-118142.1Warning
CVE-2017-118153.5Warning
CVE-2017-118162.1Warning
CVE-2017-118171.9Warning
CVE-2017-118184.4Warning
CVE-2017-118237.2High
CVE-2017-118246.9High
CVE-2017-118292.1Warning
CVE-2017-86896.9High
CVE-2017-86932.1Warning
CVE-2017-86946.9High
CVE-2017-87034.9Warning
CVE-2017-87154.6Warning
CVE-2017-87179.3Critical
CVE-2017-87189.3Critical
CVE-2017-87277.6Critical

Microsoft official advisories:

KB list:

4038793
4041689
4041693
4041687
4041676
4041690
4041691
4042895
4041679
4048955

Exploitation:

Public exploits exist for this vulnerability.

References

Related

mskb 20
openvas 16
nessus 9
kaspersky 1
prion 29
cve 29
qualysblog 1
trendmicroblog 1
talosblog 1
myhack58 2
huawei 2
threatpost 2
thn 1
krebs 1
exploitpack 1
symantec 28
mscve 28
checkpoint_advisories 14
seebug 4
zdt 3
zdi 6
mskb
mskb
October 10, 2017—KB4041679 (Security-only update)
2017-10-16 07:00:00
October 10, 2017—KB4041687 (Security-only update)
2017-10-16 07:00:00
October 10, 2017—KB4041678 (Security-only update)
2017-10-16 07:00:00
openvas
openvas
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4041690)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4041693)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4041681)
2017-10-11 00:00:00
nessus
nessus
Windows 8.1 and Windows Server 2012 R2 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
Windows Server 2012 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
Windows 7 and Windows Server 2008 R2 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
kaspersky
kaspersky
KLA11108 Multiple vulnerabilities in Microsoft Products (ESU)
2017-10-10 00:00:00
prion
prion
Information disclosure
2017-10-13 13:29:00
Information disclosure
2017-10-13 13:29:00
Information disclosure
2017-10-13 13:29:00
cve
cve
CVE-2017-11785
2017-10-13 13:29:00
CVE-2017-11784
2017-10-13 13:29:00
CVE-2017-11765
2017-10-13 13:29:00
qualysblog
qualysblog
October Patch Tuesday: 28 Critical Microsoft Vulnerabilities
2017-10-10 18:23:41
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017
2017-10-13 14:03:59
talosblog
talosblog
Microsoft Patch Tuesday - October 2017
2017-10-10 13:25:00
myhack58
myhack58
Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net
2017-10-12 00:00:00
Important vulnerabilities early warning: the Windows DNS client in the broke multiple heap buffer overflow flaws vulnerabilities in bug-bug warning-the black bar safety net
2017-10-12 00:00:00
huawei
huawei
Security Advisory - Two Remote Code Execution Vulnerabilities in Microsoft Windows
2017-12-20 00:00:00
Security Advisory - Remote Code Execution Vulnerability in Windows DNSAPI
2017-12-20 00:00:00
threatpost
threatpost
Microsoft Patches Office Bug Actively Being Exploited
2017-10-10 16:44:08
Microsoft Patches Critical Windows DNS Client Vulnerabilities
2017-10-10 14:00:55
thn
thn
Microsoft Issues Patches For Severe Flaws, Including Office Zero-Day & DNS Attack
2017-10-10 22:06:00
krebs
krebs
Microsoft’s October Patch Batch Fixes 62 Flaws
2017-10-11 14:18:40
exploitpack
exploitpack
Microsoft Windows - StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege Escalation
2018-02-20 00:00:00
symantec
symantec
Microsoft Windows CVE-2017-11829 Local Privilege Escalation Vulnerability
2017-10-10 00:00:00
Microsoft Windows Subsystem for Linux CVE-2017-8703 Local Denial of Service Vulnerability
2017-10-10 00:00:00
Microsoft Windows Device Guard CVE-2017-11823 Local Security Bypass Vulnerability
2017-10-10 00:00:00
mscve
mscve
Windows Update Delivery Optimization Elevation of Privilege Vulnerability
2017-10-10 07:00:00
Windows GDI Information Disclosure Vulnerability
2017-10-10 07:00:00
Windows Kernel Information Disclosure Vulnerability
2017-10-10 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Device Guard Security Feature Bypass (CVE-2017-11823)
2017-10-16 00:00:00
Microsoft Windows Graphics Component Information Disclosure (CVE-2017-11816)
2017-11-09 00:00:00
Microsoft Windows Kernel NtQueryObject Information Disclosure (CVE-2017-11785)
2017-10-18 00:00:00
seebug
seebug
Microsoft Windows Device Guard Local Security Bypass Vulnerability(CVE-2017-11823)
2017-10-17 00:00:00
Microsoft Windows Kernel Local Information Disclosure Vulnerability(CVE-2017-11817)
2017-10-17 00:00:00
Microsoft Windows Kernel Local Information Disclosure Vulnerability(CVE-2017-11785)
2017-10-17 00:00:00
zdt
zdt
Microsoft Windows Kernel Pool nt!NtQueryObject (ObjectNameInformation) Memory Disclosure Vulnerabi
2017-10-18 00:00:00
Microsoft Windows 10 - WLDP/MSHTML CLSID UMCI Bypass Exploit
2017-10-18 00:00:00
Microsoft Windows Kernel Pool nt!RtlpCopyLegacyContextX86 Memory Disclosure Vulnerability
2017-10-18 00:00:00
zdi
zdi
Microsoft Windows XLS File Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-10-10 00:00:00
Microsoft Windows DNSAPI NSEC3_RecordRead Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-10-10 00:00:00
Microsoft Windows XLS File Buffer Overflow Remote Code Execution Vulnerability
2017-10-10 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.799 High

EPSS

Percentile

98.2%

JSON
Related for KLA11111
mskb20openvas16nessus9kaspersky1prion29cve29qualysblog1trendmicroblog1talosblog1myhack582huawei2threatpost2thn1krebs1exploitpack1symantec28mscve28checkpoint_advisories14seebug4zdt3zdi6