Search...

Microsoft Windows Multiple Vulnerabilities (KB4025342)

2017-07-12T00:00:00
ID OPENVAS:1361412562310811465
Type openvas
Reporter Copyright (C) 2017 Greenbone Networks GmbH
Modified 2020-06-04T00:00:00

Description

This host is missing a critical security update according to Microsoft KB4025342

                                        
                                            ###############################################################################
# OpenVAS Vulnerability Test
#
# Microsoft Windows Multiple Vulnerabilities (KB4025342)
#
# Authors:
# Kashinath T <tkashinath@secpod.com>
#
# Copyright:
# Copyright (C) 2017 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.811465");
  script_version("2020-06-04T12:11:49+0000");
  script_cve_id("CVE-2017-8596", "CVE-2017-8598", "CVE-2017-8599", "CVE-2017-8601",
                "CVE-2017-8602", "CVE-2017-8603", "CVE-2017-8604", "CVE-2017-0170",
                "CVE-2017-8463", "CVE-2017-8605", "CVE-2017-8606", "CVE-2017-8607",
                "CVE-2017-8467", "CVE-2017-8486", "CVE-2017-8608", "CVE-2017-8609",
                "CVE-2017-8610", "CVE-2017-8611", "CVE-2017-8617", "CVE-2017-8618",
                "CVE-2017-8619", "CVE-2017-8495", "CVE-2017-8556", "CVE-2017-8557",
                "CVE-2017-8561", "CVE-2017-8562", "CVE-2017-8563", "CVE-2017-8564",
                "CVE-2017-8565", "CVE-2017-8566", "CVE-2017-8573", "CVE-2017-8574",
                "CVE-2017-8577", "CVE-2017-8578", "CVE-2017-8580", "CVE-2017-8581",
                "CVE-2017-8582", "CVE-2017-8585", "CVE-2017-8588", "CVE-2017-8589",
                "CVE-2017-8590", "CVE-2017-8592");
  script_bugtraq_id(99405, 99417, 99393, 99420, 99390, 99406, 99407, 99389, 99388,
                    99408, 99410, 99409, 99414, 99412, 99418, 99415, 99391, 99422,
                    99399, 99392, 99424, 99439, 99398, 99426, 99397, 99402, 99428,
                    99394, 99404, 99431, 99438, 99416, 99419, 99421, 99423, 99429,
                    99432, 99400, 99425, 99427, 99396);
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2020-06-04 12:11:49 +0000 (Thu, 04 Jun 2020)");
  script_tag(name:"creation_date", value:"2017-07-12 10:08:33 +0530 (Wed, 12 Jul 2017)");
  script_name("Microsoft Windows Multiple Vulnerabilities (KB4025342)");

  script_tag(name:"summary", value:"This host is missing a critical security
  update according to Microsoft KB4025342");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Multiple flaw exists due to,

  - Microsoft Windows fails to properly handle objects in memory.

  - The way that the Scripting Engine renders when handling objects in memory
    in Microsoft browsers.

  - The way JavaScript engines render when handling objects in memory in
    Microsoft browsers.

  - The way Microsoft Edge handles objects in memory.

  - When Windows Explorer improperly handles executable files and shares during
    rename operations.

  - when an affected Microsoft browser does not properly parse HTTP content.

  - when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).

  - When Kerberos falls back to NT LAN Manager (NTLM) Authentication Protocol as
    the default authentication protocol.

  - The way that the Windows Kernel handles objects in memory.

  - The Microsoft Graphics Component fails to properly handle
    objects in memory.");

  script_tag(name:"impact", value:"Successful exploitation will allow an attacker
  who successfully exploited the vulnerability to gain the same user rights as
  the current user, run arbitrary code, processes with elevated privileges.
  Also could take control of the affected system and cause a denial of service.");

  script_tag(name:"affected", value:"Microsoft Windows 10 Version 1703 x32/x64.");

  script_tag(name:"solution", value:"The vendor has released updates. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/help/4025342");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2017 Greenbone Networks GmbH");
  script_family("Windows : Microsoft Bulletins");
  script_dependencies("smb_reg_service_pack.nasl");
  script_require_ports(139, 445);
  script_mandatory_keys("SMB/WindowsVersion");
  exit(0);
}

include("smb_nt.inc");
include("secpod_reg.inc");
include("version_func.inc");
include("secpod_smb_func.inc");

if(hotfix_check_sp(win10:1, win10x64:1) <= 0){
  exit(0);
}

sysPath = smb_get_system32root();
if(!sysPath ){
  exit(0);
}

edgeVer = fetch_file_version(sysPath:sysPath, file_name:"edgehtml.dll");
if(!edgeVer){
  exit(0);
}

if(version_in_range(version:edgeVer, test_version:"11.0.15063.0", test_version2:"11.0.15063.482"))
{
  report = 'File checked:     ' + sysPath + "\Edgehtml.dll" + '\n' +
           'File version:     ' + edgeVer  + '\n' +
           'Vulnerable range: 11.0.15063.0 - 11.0.15063.482\n' ;
  security_message(data:report);
  exit(0);
}
exit(0);
JSON Vulners Source
Initial Source


All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please mail to content@vulners.com Vulners, 2018
Protected by