Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11873
HistorySep 23, 2019 - 12:00 a.m.

KLA11873 ACE vulnerability in Microsoft Products (ESU)

2019-09-2300:00:00
Kaspersky Lab
threats.kaspersky.com
38

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.872 High

EPSS

Percentile

98.6%

JSON

Detect date:

09/23/2019

Severity:

Critical

Description:

A memory corruption vulnerability was found in Microsoft Products (Extended Support Update). Malicious users can exploit this vulnerability to execute arbitrary code.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Internet Explorer 11
Internet Explorer 10
Internet Explorer 9

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2019-1367

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2019-13677.6Critical

KB list:

4520002
4519974

Microsoft official advisories:

Related

openvas 18
cisa 2
krebs 1
mscve 1
mskb 20
checkpoint_advisories 2
cisa_kev 1
nessus 2
kaspersky 1
githubexploit 1
symantec 1
securelist 4
attackerkb 1
qualysblog 2
cve 1
prion 1
thn 1
threatpost 2
googleprojectzero 3
openvas
openvas
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522012)
2019-09-24 00:00:00
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522009)
2019-09-24 00:00:00
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522007)
2019-09-24 00:00:00
cisa
cisa
Microsoft Re-Releases Security Updates
2019-10-03 00:00:00
Microsoft Releases Out-of-Band Security Updates
2019-09-23 00:00:00
krebs
krebs
Patch Tuesday Lowdown, October 2019 Edition
2019-10-09 06:00:58
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2019-09-23 07:00:00
mskb
mskb
October 3, 2019—KB4524153 (OS Build 10240.18335)
2019-10-08 00:00:00
October 3, 2019—KB4524148 (OS Build 17763.775)
2020-01-23 00:00:00
October 3, 2019—KB4524151 (OS Build 15063.2079)
2019-10-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Use After free (CVE-2019-1367)
2019-09-24 00:00:00
Microsoft Internet Explorer Use After free (CVE-2019-1367)
2019-09-24 00:00:00
cisa_kev
cisa_kev
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
2021-11-03 00:00:00
nessus
nessus
Windows 10, Server 2016 and Server 2019 September 2019 Security Update (CVE-2019-1367) (deprecated)
2019-09-24 00:00:00
Security Update for Internet Explorer (CVE-2019-1367)
2019-09-24 00:00:00
kaspersky
kaspersky
KLA11564 ACE vulnerability in Microsoft Browser
2019-09-23 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Microsoft
2019-09-24 06:11:10
symantec
symantec
Microsoft Internet Explorer Scripting Engine CVE-2019-1367 Remote Memory Corruption Vulnerability
2019-09-23 00:00:00
securelist
securelist
APT trends report Q1 2020
2020-04-30 11:00:13
IT threat evolution Q2 2020
2020-09-03 10:00:20
Magnitude exploit kit – evolution
2020-06-24 10:00:16
attackerkb
attackerkb
CVE-2019-1367
2019-09-23 00:00:00
qualysblog
qualysblog
Microsoft Released Out-of-Band Security Updates – How to Detect and Remediate
2019-09-24 20:13:12
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
cve
cve
CVE-2019-1367
2019-09-23 20:15:00
prion
prion
Remote code execution
2019-09-23 20:15:00
thn
thn
Microsoft Releases Emergency Patches for IE 0-Day and Windows Defender Flaw
2019-09-24 07:48:00
threatpost
threatpost
Microsoft Internet Explorer Zero-Day Flaw Addressed in Out-of-Band Security Update
2019-09-23 20:29:39
Nation-State Attacks Drop in Latest Google Analysis
2020-03-30 20:53:22
googleprojectzero
googleprojectzero
Root Cause Analyses for 0-day In-the-Wild Exploits
2020-07-29 00:00:00
Detection Deficit: A Year in Review of 0-days Used In-The-Wild in 2019
2020-07-29 00:00:00
Déjà vu-lnerability
2021-02-03 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.872 High

EPSS

Percentile

98.6%

JSON
Related for KLA11873
openvas18cisa2krebs1mscve1mskb20checkpoint_advisories2cisa_kev1nessus2kaspersky1githubexploit1symantec1securelist4attackerkb1qualysblog2cve1prion1thn1threatpost2googleprojectzero3