Test Kennung:	1.3.6.1.4.1.25623.1.0.902067
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (979559)
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS10-032.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS10-032. Vulnerability Insight: The flaws are due to an error in the kernel-mode device driver 'Win32k.sys', which - does not properly validate changes in certain 'kernel objects'. - does not properly validate all callback parameters when creating a 'new window' or - when providing 'glyph' outline information to applications. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code with kernel privileges. Affected Software/OS: - Microsoft Windows 7 - Microsoft Windows 2K Service Pack 4 and prior - Microsoft Windows XP Service Pack 3 and prior - Microsoft Windows 2K3 Service Pack 2 and prior - Microsoft Windows Vista Service Pack 1/2 and prior - Microsoft Windows Server 2008 Service Pack 1/2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Querverweis:	BugTraq ID: 40508 BugTraq ID: 40569 BugTraq ID: 40570 Common Vulnerability Exposure (CVE) ID: CVE-2010-0484 Bugtraq: 20100608 VUPEN Security Research - Microsoft Windows Kernel "GetDCEx()" Memory Corruption Vulnerability (CVE-2010-0484) (Google Search) http://www.securityfocus.com/archive/1/511769/100/0/threaded Cert/CC Advisory: TA10-159B http://www.us-cert.gov/cas/techalerts/TA10-159B.html Microsoft Security Bulletin: MS10-032 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7609 Common Vulnerability Exposure (CVE) ID: CVE-2010-0485 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6948 Common Vulnerability Exposure (CVE) ID: CVE-2010-1255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.