Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11167
HistoryJan 03, 2018 - 12:00 a.m.

KLA11167 Multiple vulnerabilities in Microsoft Products (ESU)

2018-01-0300:00:00
Kaspersky Lab
threats.kaspersky.com
109

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.085 Low

EPSS

Percentile

94.3%

JSON

Detect date:

01/03/2018

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges.

Affected products:

ChakraCore
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows 10 for 32-bit Systems
Internet Explorer 9
Windows 10 for x64-based Systems
Windows Server 2012 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows 8.1 for x64-based systems
Windows Server 2012
Internet Explorer 11
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2016
Windows 10 Version 1709 for x64-based Systems
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows 10 Version 1703 for x64-based Systems
Windows Server 2012 R2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows 10 Version 1511 for 32-bit Systems
Microsoft Edge (EdgeHTML-based)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 10
Windows 10 Version 1709 for 32-bit Systems
Windows Server 2012 R2

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2018-0750
CVE-2018-0762
CVE-2018-0747
CVE-2018-0788
CVE-2018-0754
CVE-2018-0741
CVE-2018-0772
CVE-2018-0749
CVE-2018-0748
ADV180002

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2018-07412.6Warning
CVE-2018-07471.9Warning
CVE-2018-07484.6Warning
CVE-2018-07494.6Warning
CVE-2018-07502.1Warning
CVE-2018-07542.1Warning
CVE-2018-07886.9High
CVE-2018-07627.6Critical
CVE-2018-07727.6Critical

Microsoft official advisories:

KB list:

4056894
4056897
4056942
4056613
4056615
4056759
4056944
4056941
4340583
4056568
4493472
4493448

Exploitation:

Public exploits exist for this vulnerability.

References

Related

mskb 19
nessus 10
openvas 9
kaspersky 2
mscve 9
cve 22
zdt 2
prion 22
symantec 1
checkpoint_advisories 1
googleprojectzero 2
zdi 1
talosblog 1
trendmicroblog 1
osv 13
veracode 7
mskb
mskb
January 4, 2018—KB4056894 (Monthly Rollup)
2018-01-03 08:00:00
January 3, 2018—KB4056897 (Security-only update)
2018-01-03 08:00:00
January 4, 2018—KB4056896 (Monthly Rollup)
2018-01-03 08:00:00
nessus
nessus
Windows 2008 January 3 2018 Multiple Security Updates
2018-01-04 00:00:00
KB4056897: Windows 7 and Windows Server 2008 R2 January 2018 Security Update (Meltdown)(Spectre)
2018-01-04 00:00:00
KB4056899: Windows Server 2012 January 2018 Security Update
2018-01-04 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4056897)
2018-01-04 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4056899)
2018-01-04 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4056898)
2018-01-04 00:00:00
kaspersky
kaspersky
KLA11165 Microsoft vulnerabilities in Microsoft Windows
2018-01-03 00:00:00
KLA11166 Multiple vunlerabilities in Microsoft Browsers
2018-01-03 00:00:00
mscve
mscve
Microsoft Color Management Information Disclosure Vulnerability
2018-01-03 08:00:00
Windows GDI Information Disclosure Vulnerability
2018-01-03 08:00:00
Windows Elevation of Privilege Vulnerability
2018-01-03 08:00:00
cve
cve
CVE-2018-0741
2018-01-04 14:29:00
CVE-2018-0748
2018-01-04 14:29:00
CVE-2018-0788
2018-01-04 14:29:00
zdt
zdt
Microsoft Windows - NTFS Owner/Mandatory Label Privilege Bypass Exploit
2018-01-11 00:00:00
Microsoft Windows SMB Server (v1 and v2) - Mount Point Arbitrary Device Open Privilege Escalation Ex
2018-01-11 00:00:00
prion
prion
Information disclosure
2018-01-04 14:29:00
Privilege escalation
2018-01-04 14:29:00
Information disclosure
2018-01-04 14:29:00
symantec
symantec
Microsoft Internet Explorer and Edge CVE-2018-0762 Remote Memory Corruption Vulnerability
2018-01-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Browser Scripting Engine Memory Corruption (CVE-2018-0762)
2018-01-04 00:00:00
googleprojectzero
googleprojectzero
Windows‌ ‌Exploitation‌ ‌Tricks:‌ ‌Spoofing‌ ‌Named‌ ‌Pipe‌ ‌Client‌ ‌PID‌
2019-09-25 00:00:00
Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager
2019-03-14 00:00:00
zdi
zdi
Microsoft Chakra Memory Allocator Integer Overflow Remote Code Execution Vulnerability
2018-01-05 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - January 2018
2018-01-09 13:36:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 8, 2018
2018-01-12 15:09:44
osv
osv
CVE-2018-0777
2018-01-04 14:29:01
CVE-2018-0781
2018-01-04 14:29:01
CVE-2018-0769
2018-01-04 14:29:00
veracode
veracode
Remote Code Execution (RCE)
2018-07-05 01:12:57
Remote Code Execution (RCE)
2018-07-05 03:03:14
Remote Code Execution (RCE)
2018-07-04 08:38:30

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.085 Low

EPSS

Percentile

94.3%

JSON
Related for KLA11167
mskb19nessus10openvas9kaspersky2mscve9cve22zdt2prion22symantec1checkpoint_advisories1googleprojectzero2zdi1talosblog1trendmicroblog1osv13veracode7