ID de Prueba:	1.3.6.1.4.1.25623.1.0.815408
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft Windows Multiple Vulnerabilities (KB4507469)
Resumen:	This host is missing a critical security; update according to Microsoft KB4507469
Descripción:	Summary: This host is missing a critical security update according to Microsoft KB4507469 Vulnerability Insight: Multiple flaws exist due to: - SymCrypt improperly handles a specially crafted digital signature. - Scripting engine improperly handles objects in memory in Microsoft browsers. - DirectWrite improperly handles objects in memory. - Windows RDP client improperly discloses the contents of its memory. - Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. - Kernel Information Disclosure Vulnerability (SWAPGS Attack). Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow attackers to run arbitrary code, obtain information to further compromise the user's system, conduct denial-of-service and take control of the affected system. Affected Software/OS: - Microsoft Windows Server 2019 - Microsoft Windows 10 Version 1809 for 32-bit Systems - Microsoft Windows 10 Version 1809 for x64-based Systems Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-0785 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0785 Common Vulnerability Exposure (CVE) ID: CVE-2019-0811 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0811 Common Vulnerability Exposure (CVE) ID: CVE-2019-0865 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0865 Common Vulnerability Exposure (CVE) ID: CVE-2019-0880 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880 Common Vulnerability Exposure (CVE) ID: CVE-2019-0887 BugTraq ID: 108964 http://www.securityfocus.com/bid/108964 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887 https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection/ Common Vulnerability Exposure (CVE) ID: CVE-2019-1097 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1097 Common Vulnerability Exposure (CVE) ID: CVE-2019-1102 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1102 Common Vulnerability Exposure (CVE) ID: CVE-2019-0966 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0966 Common Vulnerability Exposure (CVE) ID: CVE-2019-0975 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975 Common Vulnerability Exposure (CVE) ID: CVE-2019-1001 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1001 Common Vulnerability Exposure (CVE) ID: CVE-2019-1004 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1004 Common Vulnerability Exposure (CVE) ID: CVE-2019-1103 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1103 Common Vulnerability Exposure (CVE) ID: CVE-2019-1104 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1104 Common Vulnerability Exposure (CVE) ID: CVE-2019-1106 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1106 Common Vulnerability Exposure (CVE) ID: CVE-2019-1107 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1107 Common Vulnerability Exposure (CVE) ID: CVE-2019-1108 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1108 Common Vulnerability Exposure (CVE) ID: CVE-2019-1006 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1006 Common Vulnerability Exposure (CVE) ID: CVE-2019-1037 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1037 Common Vulnerability Exposure (CVE) ID: CVE-2019-1056 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1056 Common Vulnerability Exposure (CVE) ID: CVE-2019-1059 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1059 Common Vulnerability Exposure (CVE) ID: CVE-2019-1062 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1062 Common Vulnerability Exposure (CVE) ID: CVE-2019-1063 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1063 Common Vulnerability Exposure (CVE) ID: CVE-2019-1067 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1067 Common Vulnerability Exposure (CVE) ID: CVE-2019-1117 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1117 Common Vulnerability Exposure (CVE) ID: CVE-2019-1118 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1118 Common Vulnerability Exposure (CVE) ID: CVE-2019-1119 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1119 Common Vulnerability Exposure (CVE) ID: CVE-2019-1120 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1120 Common Vulnerability Exposure (CVE) ID: CVE-2019-1121 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1121 Common Vulnerability Exposure (CVE) ID: CVE-2019-1122 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1122 Common Vulnerability Exposure (CVE) ID: CVE-2019-1123 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1123 Common Vulnerability Exposure (CVE) ID: CVE-2019-1071 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1071 Common Vulnerability Exposure (CVE) ID: CVE-2019-1073 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1073 Common Vulnerability Exposure (CVE) ID: CVE-2019-1124 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1124 Common Vulnerability Exposure (CVE) ID: CVE-2019-1126 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1126 Common Vulnerability Exposure (CVE) ID: CVE-2019-1127 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1127 Common Vulnerability Exposure (CVE) ID: CVE-2019-1128 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1128 Common Vulnerability Exposure (CVE) ID: CVE-2019-1129 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1129 Common Vulnerability Exposure (CVE) ID: CVE-2019-1130 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1130 Common Vulnerability Exposure (CVE) ID: CVE-2019-1074 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1074 Common Vulnerability Exposure (CVE) ID: CVE-2019-1085 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1085 Common Vulnerability Exposure (CVE) ID: CVE-2019-1086 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1086 Common Vulnerability Exposure (CVE) ID: CVE-2019-1087 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1087 Common Vulnerability Exposure (CVE) ID: CVE-2019-1088 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1088 Common Vulnerability Exposure (CVE) ID: CVE-2019-1089 http://packetstormsecurity.com/files/153683/Microsoft-Windows-RPCSS-Activation-Kernel-Security-Callback-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1089 Common Vulnerability Exposure (CVE) ID: CVE-2019-1090 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1090 Common Vulnerability Exposure (CVE) ID: CVE-2019-1091 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1091 Common Vulnerability Exposure (CVE) ID: CVE-2019-1092 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1092 Common Vulnerability Exposure (CVE) ID: CVE-2019-1095 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1095 Common Vulnerability Exposure (CVE) ID: CVE-2019-1096 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1096 Common Vulnerability Exposure (CVE) ID: CVE-2019-1093 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1093 Common Vulnerability Exposure (CVE) ID: CVE-2019-1094 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1094 Common Vulnerability Exposure (CVE) ID: CVE-2019-0683 Common Vulnerability Exposure (CVE) ID: CVE-2019-1125 http://packetstormsecurity.com/files/156337/SWAPGS-Attack-Proof-Of-Concept.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1125 RedHat Security Advisories: RHBA-2019:2824 https://access.redhat.com/errata/RHBA-2019:2824 RedHat Security Advisories: RHBA-2019:3248 https://access.redhat.com/errata/RHBA-2019:3248 RedHat Security Advisories: RHSA-2019:2600 https://access.redhat.com/errata/RHSA-2019:2600 RedHat Security Advisories: RHSA-2019:2609 https://access.redhat.com/errata/RHSA-2019:2609 RedHat Security Advisories: RHSA-2019:2695 https://access.redhat.com/errata/RHSA-2019:2695 RedHat Security Advisories: RHSA-2019:2696 https://access.redhat.com/errata/RHSA-2019:2696 RedHat Security Advisories: RHSA-2019:2730 https://access.redhat.com/errata/RHSA-2019:2730 RedHat Security Advisories: RHSA-2019:2899 https://access.redhat.com/errata/RHSA-2019:2899 RedHat Security Advisories: RHSA-2019:2900 https://access.redhat.com/errata/RHSA-2019:2900 RedHat Security Advisories: RHSA-2019:2975 https://access.redhat.com/errata/RHSA-2019:2975 RedHat Security Advisories: RHSA-2019:3011 https://access.redhat.com/errata/RHSA-2019:3011 RedHat Security Advisories: RHSA-2019:3220 https://access.redhat.com/errata/RHSA-2019:3220
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.