Дата обнаружения
|
11/04/2017 |
Уровень угрозы
|
Critical |
Описание
|
Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities:
|
Эксплуатация
|
This vulnerability can be exploited by the following malware: https://threats.kaspersky.com/en/threat/Exploit.MSOffice.CVE-2017-0199/ https://threats.kaspersky.com/en/threat/Exploit.MSOffice.Oleink/ https://threats.kaspersky.com/en/threat/Trojan.Win32.FormBook/ https://threats.kaspersky.com/en/threat/Trojan-PSW.Win32.Azorult/ Public exploits exist for this vulnerability. |
Пораженные продукты
|
Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based) |
Решение
|
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel) |
Первичный источник обнаружения
|
CVE-2017-0201 CVE-2017-0183 CVE-2017-0058 CVE-2017-0155 CVE-2013-6629 CVE-2017-0163 CVE-2017-0180 CVE-2017-0182 CVE-2017-0158 CVE-2017-0184 CVE-2017-0192 CVE-2017-0168 CVE-2017-0166 CVE-2017-0167 CVE-2017-0191 CVE-2017-0156 CVE-2017-0199 |
Оказываемое влияние
?
|
ACE
[?]
OSI
[?]
DoS
[?]
SB
[?]
PE
[?]
SUI
[?]
|
Связанные продукты
|
Microsoft Internet Explorer Microsoft Silverlight Microsoft Office Microsoft Windows Microsoft Windows Server Microsoft Windows Vista Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows Server 2008 Windows RT Microsoft Windows 10 |
CVE-IDS
|
CVE-2017-01999.3Critical
CVE-2017-02017.6Critical CVE-2017-00581.9Warning CVE-2017-01556.9High CVE-2017-01566.9High CVE-2017-01669.3Critical CVE-2017-01672.1Warning CVE-2017-01913.5Warning CVE-2017-01924.3Warning CVE-2017-01587.6Critical CVE-2017-01637.4High CVE-2017-01686.3High CVE-2017-01807.4High CVE-2017-01826.3High CVE-2017-01836.3High CVE-2017-01845.2High CVE-2013-66295.0Warning |