Lucene search

K
mskbMicrosoftKB4493795
HistoryApr 09, 2019 - 12:00 a.m.

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019

2019-04-0900:00:00
Microsoft
support.microsoft.com
28

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.4%

Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: April 9, 2019

Summary

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine incorrectly handles objects in memory.

To learn more about the vulnerability, go to CVE-2019-0671.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.
Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Information about protection and security

File information

File hash information

File name SHA1 hash SHA256 hash
WindowsXP-KB4493795-x86-Embedded-ENU.exe 9A084800B33B40776DA30E70293CCCFE4B0342F5 CFD142C85C7960FE38B261851AD1DF2DDB32B4F4417529F3DC95098835F625B4
Windows Embedded POSReady 2009 file information

For all supported x86-based versions

File name File version File size Date Time Platform
Msexcl40.dll 4.0.9801.14 340,992 14-Mar-2019 14:07 x86

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.019 Low

EPSS

Percentile

88.4%