Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11136
HistoryNov 14, 2017 - 12:00 a.m.

KLA11136 Multiple vulnerabilities in Microsoft Windows

2017-11-1400:00:00
Kaspersky Lab
threats.kaspersky.com
122

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.5%

JSON

Detect date:

11/14/2017

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, gain privileges.

Affected products:

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 10 Version 1709 for x64-based Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2017-11768
CVE-2017-11788
CVE-2017-11830
CVE-2017-11831
CVE-2017-11832
CVE-2017-11842
CVE-2017-11847
CVE-2017-11849
CVE-2017-11850
CVE-2017-11851
CVE-2017-11853
CVE-2017-11880

Impacts:

OSI

Related products:

Microsoft Windows

CVE-IDS:

CVE-2017-117681.9Warning
CVE-2017-117885.0Warning
CVE-2017-118304.6Warning
CVE-2017-118314.7Warning
CVE-2017-118321.9Warning
CVE-2017-118421.9Warning
CVE-2017-118479.3Critical
CVE-2017-118491.9Warning
CVE-2017-118501.9Warning
CVE-2017-118511.9Warning
CVE-2017-118534.3Warning
CVE-2017-118801.9Warning

Microsoft official advisories:

KB list:

4048955
4048952
4048953
4048954
4048956
4048958
4048959
4048961
4048962

Exploitation:

Public exploits exist for this vulnerability.

References

Related

mskb 17
nessus 10
cve 13
prion 13
openvas 12
kaspersky 1
symantec 12
mscve 12
zdi 2
exploitpack 2
zdt 3
checkpoint_advisories 1
talosblog 1
packetstorm 1
trendmicroblog 1
exploitdb 2
thn 2
qualysblog 1
threatpost 1
mskb
mskb
November 14, 2017—KB4048962 (Security-only update)
2017-11-14 08:00:00
November 14, 2017—KB4048961 (Security-only update)
2017-11-14 08:00:00
November 14, 2017—KB4048960 (Security-only update)
2017-11-14 08:00:00
nessus
nessus
Windows 2008 November 2017 Multiple Security Updates
2017-11-14 00:00:00
Windows Server 2012 November 2017 Security Updates
2017-11-14 00:00:00
Windows 8.1 and Windows Server 2012 R2 November 2017 Security Updates
2017-11-14 00:00:00
cve
cve
CVE-2017-11842
2017-11-15 03:29:00
CVE-2017-11851
2017-11-15 03:29:00
CVE-2017-11853
2017-11-15 03:29:00
prion
prion
Information disclosure
2017-11-15 03:29:00
Information disclosure
2017-11-15 03:29:00
Information disclosure
2017-11-15 03:29:00
openvas
openvas
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4048959)
2017-11-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4048970)
2017-11-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4048958)
2017-11-15 00:00:00
kaspersky
kaspersky
KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)
2017-11-14 00:00:00
symantec
symantec
Microsoft Windows Search CVE-2017-11788 Remote Denial of Service Vulnerability
2017-11-14 00:00:00
Microsoft Windows Kernel CVE-2017-11880 Local Information Disclosure Vulnerability
2017-11-14 00:00:00
Microsoft Windows CVE-2017-11832 Information Disclosure Vulnerability
2017-11-14 00:00:00
mscve
mscve
Windows Kernel Information Disclosure Vulnerability
2017-11-14 08:00:00
Windows Kernel Elevation of Privilege Vulnerability
2017-11-14 08:00:00
Windows EOT Font Engine Information Disclosure Vulnerability
2017-11-14 08:00:00
zdi
zdi
Microsoft Windows EngLockSurface Time-Of-Check Time-Of-Use Race Condition Information Disclosure Vulnerability
2017-11-20 00:00:00
Microsoft Windows win32k Menu Use-After-Free Privilege Escalation Vulnerability
2017-11-20 00:00:00
exploitpack
exploitpack
Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix
2018-04-16 00:00:00
Microsoft Windows - CiSetFileCache WDAC Security Feature Bypass TOCTOU
2018-09-19 00:00:00
zdt
zdt
Microsoft Windows NTFS File System Metadata Disclosures Exploit
2017-11-22 00:00:00
Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass Vulnerability
2017-11-20 00:00:00
Microsoft Windows 10 - nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry) Pool Memory Disclosur
2017-11-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Kernel Elevation of Privilege (CVE-2017-11847)
2017-11-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - November 2017
2017-11-14 11:54:00
packetstorm
packetstorm
Windows Media Player Information Disclosure
2017-12-26 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 13, 2017
2017-11-17 16:46:19
exploitdb
exploitdb
Microsoft Windows - 'CiSetFileCache' WDAC Security Feature Bypass TOCTOU
2018-09-19 00:00:00
Microsoft Windows - 'CiSetFileCache' TOCTOU Incomplete Fix
2018-04-16 00:00:00
thn
thn
17-Year-Old MS Office Flaw Lets Hackers Install Malware Without User Interaction
2017-11-14 23:06:00
Patch Tuesday: Microsoft Releases Update to Fix 53 Vulnerabilities
2017-11-14 20:46:00
qualysblog
qualysblog
November Patch Tuesday: 53 Vulnerabilities and a Massive Adobe Update
2017-11-14 19:37:26
threatpost
threatpost
Microsoft November Patch Tuesday Fixes 20 Critical Vulnerabilities
2017-11-14 17:10:48

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.5%

JSON
Related for KLA11136
mskb17nessus10cve13prion13openvas12kaspersky1symantec12mscve12zdi2exploitpack2zdt3checkpoint_advisories1talosblog1packetstorm1trendmicroblog1exploitdb2thn2qualysblog1threatpost1