Kaspersky Threats

Detect date

?

03/14/2017

Severity

?

Critical

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

A denial of service vulnerability in Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
A remote code execution vulnerability in Hyper-V vSMB can be exploited remotely via specially crafted application to execute arbitrary code.
An information disclosure vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to obtain sensitive information.
A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code.

Affected products

Windows Server 2016
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1511 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2012
Windows 10 Version 1607 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Vista x64 Edition Service Pack 2
Windows 10 Version 1607 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 8.1 for x64-based systems
Windows Server 2016 (Server Core installation)

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2017-0051
CVE-2017-0021
CVE-2017-0095
CVE-2017-0096
CVE-2017-0097
CVE-2017-0098
CVE-2017-0099
CVE-2017-0109
CVE-2017-0074
CVE-2017-0075
CVE-2017-0076

Impacts

?

ACE

[?]

OSI

[?]

DoS

[?]

Detect date ?	03/14/2017
Severity ?	Critical
Description	Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: A denial of service vulnerability in Hyper-V can be exploited remotely via specially crafted application to cause denial of service. A remote code execution vulnerability in Hyper-V vSMB can be exploited remotely via specially crafted application to execute arbitrary code. An information disclosure vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to obtain sensitive information. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code.
Affected products	Windows Server 2016 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 (Server Core installation) Windows 10 Version 1511 for x64-based Systems Windows 7 for x64-based Systems Service Pack 1 Windows Server 2012 Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2012 R2 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Vista x64 Edition Service Pack 2 Windows 10 Version 1607 for x64-based Systems Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows 8.1 for x64-based systems Windows Server 2016 (Server Core installation)
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2017-0051 CVE-2017-0021 CVE-2017-0095 CVE-2017-0096 CVE-2017-0097 CVE-2017-0098 CVE-2017-0099 CVE-2017-0109 CVE-2017-0074 CVE-2017-0075 CVE-2017-0076
Impacts ?	ACE [?] OSI [?] DoS [?]
Related products	Microsoft Windows Microsoft Windows Server Microsoft Windows Vista Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows 10
CVE-IDS ?	CVE-2017-00512.9Warning CVE-2017-00217.7Critical CVE-2017-00957.9Critical CVE-2017-00962.3Warning CVE-2017-00972.3Warning CVE-2017-00982.9Warning CVE-2017-00992.3Warning CVE-2017-01097.4High CVE-2017-00742.3Warning CVE-2017-00757.4High CVE-2017-00762.9Warning
Microsoft official advisories	Microsoft Security Update Guide
KB list	4012217 4012216 4012606 4013198 4013429 3211306 4012214 4012213
	Find out the statistics of the vulnerabilities spreading in your region

KLA10975Multiple vulnerabilities in Microsoft Windows

KLA10975
Multiple vulnerabilities in Microsoft Windows