Lucene search

K
kasperskyKaspersky LabKLA11667
HistoryFeb 11, 2020 - 12:00 a.m.

KLA11667 Multiple vulnerabilities in Microsoft Browser

2020-02-1100:00:00
Kaspersky Lab
threats.kaspersky.com
45

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%

Detect date:

02/11/2020

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Internet Explorer 10
ChakraCore
Microsoft Edge (EdgeHTML-based)
Internet Explorer 9
Internet Explorer 11

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2020-0663
CVE-2020-0767
CVE-2020-0706
CVE-2020-0713
CVE-2020-0712
CVE-2020-0711
CVE-2020-0710
CVE-2020-0674
CVE-2020-0673

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2020-06634.0Warning
CVE-2020-07677.6Critical
CVE-2020-07064.3Warning
CVE-2020-07137.6Critical
CVE-2020-07127.6Critical
CVE-2020-07117.6Critical
CVE-2020-07107.6Critical
CVE-2020-06747.6Critical
CVE-2020-06737.6Critical

KB list:

4537820
4537821
4537776
4532693
4532691
4537762
4537764
4537789
4537814
4537767

Microsoft official advisories:

References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%