Kaspersky Threats

Detect date

?

11/14/2017

Severity

?

High

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

An information disclosure vulnerability in Windows Media Player can be exploited remotely via specially crafted application to obtain sensitive information.
A denial of service vulnerability in Windows Search can be exploited remotely via specially crafted messages to cause denial of service.
A security feature bypass vulnerability in Device Guard can be exploited remotely to bypass security restrictions.
An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
An information disclosure vulnerability in Windows EOT Font Engine can be exploited remotely via specially crafted embedded to obtain sensitive information.
An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges.
An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information.
An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted application to obtain sensitive information.

Affected products

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 10 Version 1709 for x64-based Systems

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2017-11768
CVE-2017-11788
CVE-2017-11830
CVE-2017-11831
CVE-2017-11832
CVE-2017-11842
CVE-2017-11847
CVE-2017-11849
CVE-2017-11850
CVE-2017-11851
CVE-2017-11853
CVE-2017-11880

Impacts

?

OSI

[?]

DoS

[?]

SB

[?]

PE

[?]

Detect date ?	11/14/2017
Severity ?	High
Description	Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: An information disclosure vulnerability in Windows Media Player can be exploited remotely via specially crafted application to obtain sensitive information. A denial of service vulnerability in Windows Search can be exploited remotely via specially crafted messages to cause denial of service. A security feature bypass vulnerability in Device Guard can be exploited remotely to bypass security restrictions. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information. An information disclosure vulnerability in Windows EOT Font Engine can be exploited remotely via specially crafted embedded to obtain sensitive information. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely via specially crafted application to gain privileges. An information disclosure vulnerability in Microsoft Graphics Component can be exploited remotely via specially crafted application to obtain sensitive information. An information disclosure vulnerability in Windows GDI can be exploited remotely via specially crafted application to obtain sensitive information.
Affected products	Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Windows 10 Version 1511 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1703 for 32-bit Systems Windows 10 Version 1703 for x64-based Systems Windows 10 Version 1709 for 32-bit Systems Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1709 for x64-based Systems
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2017-11768 CVE-2017-11788 CVE-2017-11830 CVE-2017-11831 CVE-2017-11832 CVE-2017-11842 CVE-2017-11847 CVE-2017-11849 CVE-2017-11850 CVE-2017-11851 CVE-2017-11853 CVE-2017-11880
Impacts ?	OSI [?] DoS [?] SB [?] PE [?]
Related products	Microsoft Windows Microsoft Windows Server Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows Server 2008 Windows RT Microsoft Windows 10
CVE-IDS ?	CVE-2017-117681.9Warning CVE-2017-117885.0Critical CVE-2017-118304.6Warning CVE-2017-118314.7Warning CVE-2017-118321.9Warning CVE-2017-118421.9Warning CVE-2017-118479.3Critical CVE-2017-118491.9Warning CVE-2017-118501.9Warning CVE-2017-118511.9Warning CVE-2017-118534.3Warning CVE-2017-118801.9Warning
Microsoft official advisories	Microsoft Security Update Guide
KB list	4048955 4048952 4048953 4048954 4048956 4048958 4048959 4048961 4048962
Exploitation	The following public exploits exists for this vulnerability: https://www.exploit-db.com/exploits/43162 https://www.exploit-db.com/exploits/43165
	Find out the statistics of the vulnerabilities spreading in your region

KLA11136Multiple vulnerabilities in Microsoft Windows

KLA11136
Multiple vulnerabilities in Microsoft Windows