KLA10975
Multiple vulnerabilities in Microsoft Windows
Updated: 09/29/2020
Detect date
?
03/14/2017
Severity
?
Critical
Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. A denial of service vulnerability in Hyper-V can be exploited remotely via specially crafted application to cause denial of service.
  2. A remote code execution vulnerability in Hyper-V vSMB can be exploited remotely via specially crafted application to execute arbitrary code.
  3. An information disclosure vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to obtain sensitive information.
  4. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely via specially crafted application to execute arbitrary code.
Affected products

Windows Server 2016
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1511 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2012
Windows 10 Version 1607 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Vista x64 Edition Service Pack 2
Windows 10 Version 1607 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 8.1 for x64-based systems
Windows Server 2016 (Server Core installation)

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2017-0051
CVE-2017-0021
CVE-2017-0095
CVE-2017-0096
CVE-2017-0097
CVE-2017-0098
CVE-2017-0099
CVE-2017-0109
CVE-2017-0074
CVE-2017-0075
CVE-2017-0076

Impacts
?
ACE 
[?]

OSI 
[?]

DoS 
[?]
Related products
Microsoft Windows
Microsoft Windows Server
Microsoft Windows Vista
Microsoft Windows Server 2012
Microsoft Windows 8
Microsoft Windows 7
Microsoft Windows Server 2008
Microsoft Windows 10
CVE-IDS
?
CVE-2017-00512.9Warning
CVE-2017-00217.7Critical
CVE-2017-00957.9Critical
CVE-2017-00962.3Warning
CVE-2017-00972.3Warning
CVE-2017-00982.9Warning
CVE-2017-00992.3Warning
CVE-2017-01097.4High
CVE-2017-00742.3Warning
CVE-2017-00757.4High
CVE-2017-00762.9Warning
Microsoft official advisories
Microsoft Security Update Guide
KB list

4012217
4012216
4012606
4013198
4013429
3211306
4012214
4012213