Multiple vulnerabilities in Microsoft Products (ESU)

Описание

Multiple vulnerabilities were found in Microsoft Products (Extedned Support Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows RRAS Service can be exploited remotely via specially crafted application to execute arbitrary code.
2. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
3. An information disclosure vulnerability in Internet Explorer can be exploited remotely via specially crafted content to obtain sensitive information.
4. An information disclosure vulnerability in Microsoft Windows can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2017-11885
  CVE-2017-11886
  CVE-2017-11887
  CVE-2017-11894
  CVE-2017-11927
  CVE-2017-11907
  CVE-2017-11890
  CVE-2017-11912
  CVE-2017-11906
  CVE-2017-11903
  CVE-2017-11913
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Internet-Explorer
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10
• Microsoft-Edge
• ChakraCore

Список CVE

• CVE-2017-11885
  critical
• CVE-2017-11927
  warning
• CVE-2017-11886
  critical
• CVE-2017-11887
  warning
• CVE-2017-11890
  critical
• CVE-2017-11894
  critical
• CVE-2017-11903
  critical
• CVE-2017-11906
  warning
• CVE-2017-11907
  critical
• CVE-2017-11912
  critical
• CVE-2017-11913
  critical

Список KB

• 4052303
• 4054518
• 4054521
• 4052978
• 4103712
• 4103718
• 4130957

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com