Kaspersky ID:
KLA11896
Дата обнаружения:
10/04/2018
Обновлено:
02/02/2024

Описание

Multiple vulnerabilities were found in Microsoft Products (Extended Support Update). Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

  1. A memory corruption vulnerability in Internet Explorer can be exploited remotely via specially crafted website to execute arbitrary code.
  2. A remote code execution vulnerability in Windows VBScript Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  3. An information disclosure vulnerability in Scripting Engine can be exploited remotely via specially crafted content to obtain sensitive information.
  4. An elevation of privilege vulnerability in Graphics Component Font Parsing can be exploited remotely via specially crafted application to gain privileges.
  5. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to obtain sensitive information.
  6. An information disclosure vulnerability in Windows Kernel can be exploited remotely via specially crafted application to obtain sensitive information.
  7. A denial of service vulnerability in Windows SNMP Service can be exploited remotely to cause denial of service.
  8. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code.
  9. An information disclosure vulnerability in Scripting Engine can be exploited remotely via specially crafted website to obtain sensitive information.
  10. A denial of service vulnerability in Microsoft Graphics Component can be exploited remotely to cause denial of service.
  11. A remote code execution vulnerability in Microsoft Graphics can be exploited remotely via specially crafted embedded to execute arbitrary code.
  12. A denial of service vulnerability in Windows Remote Desktop Protocol (RDP) can be exploited remotely via specially crafted requests to cause denial of service.
  13. A remote code execution vulnerability in Microsoft JET Database Engine can be exploited remotely via specially crafted to execute arbitrary code.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2018-0887
    high
  • CVE-2018-0960
    high
  • CVE-2018-0967
    high
  • CVE-2018-0969
    high
  • CVE-2018-0970
    high
  • CVE-2018-0971
    high
  • CVE-2018-0972
    high
  • CVE-2018-0973
    high
  • CVE-2018-0974
    high
  • CVE-2018-0975
    high
  • CVE-2018-0976
    high
  • CVE-2018-1003
    critical
  • CVE-2018-1004
    critical
  • CVE-2018-1008
    high
  • CVE-2018-1010
    critical
  • CVE-2018-1012
    critical
  • CVE-2018-1013
    critical
  • CVE-2018-1015
    critical
  • CVE-2018-1016
    critical
  • CVE-2018-8116
    high
  • CVE-2018-0981
    high
  • CVE-2018-1000
    high
  • CVE-2018-1001
    critical
  • CVE-2018-1020
    critical
  • CVE-2018-0988
    critical
  • CVE-2018-0987
    warning
  • CVE-2018-0989
    warning
  • CVE-2018-0996
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.