KLA10011
Multiple vulnerabilities in Microsoft Graphics Component

Обновлено: 03/06/2020

Дата обнаружения	03/07/2014
Уровень угрозы	Critical
Описание	Multiple serious vulnerabilities have been found in a number of Microsoft products (full list below). Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities Vectors related to unknown vulnerabilities can be exploited to execute arbitrary code via specially designed EMF+ record in an image file. Vectors related to Uniscribe can be exploited to execute arbitrary code or cause a denial of service via specially designed EMF+ record in a font file.
Пораженные продукты	Windows Server 2003 SP2 x86, x64, for Itanium Windows Vista SP2 x86, x64 Windows Server 2008 SP2 x86, x64, for Itanium Windows 7 SP1 x86, x64 Windows Server 2008 R2 x86, x64, for Itanium Windows 8 x86, x64 Windows 8.1 x86, x64 Windows Server 2012, 2012 R2 Windows RT, RT 8.1 Office 2007 SP3 Office 2010 SP1 x86, x64 Office 2010 SP2 x86, x64 Live Meeting 2007 Console Lync 2010 x86, x64 Lync 2010 Attendee Lync 2013, 2013 SP1 x86 Lync Basic 2013 x86, x64 Lync Basic 2013 SP1 x86, x64
Решение	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Первичный источник обнаружения	MS bulletin CVE-2014-1818 CVE-2014-1817
Оказываемое влияние ?	ACE [?] OSI [?] DoS [?] SB [?] WLF [?] PE [?] RLF [?] LoI [?]
Связанные продукты	Microsoft Access Microsoft Office Live Meeting 2007 Microsoft Lync Microsoft Office Access Microsoft Office PowerPoint Microsoft Office Visio 2007 Microsoft Office Visio Microsoft Office Professional Plus 2010 Microsoft Office Microsoft Lync 2010 Attendee Microsoft Outlook Microsoft Excel Microsoft Word Microsoft Windows Microsoft Windows Server Microsoft Windows Vista Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition
CVE-IDS	CVE-2014-18189.3Critical CVE-2014-18179.3Critical

KLA10011Multiple vulnerabilities in Microsoft Graphics Component

KLA10011
Multiple vulnerabilities in Microsoft Graphics Component