Microsoft Windows Multiple Vulnerabilities (KB4056890)

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.812294");
  script_version("$Revision: 8294 $");
  script_cve_id("CVE-2018-0744", "CVE-2018-0746", "CVE-2018-0747", "CVE-2018-0748",
                "CVE-2018-0749", "CVE-2018-0751", "CVE-2018-0752", "CVE-2018-0753",
                "CVE-2018-0754", "CVE-2018-0758", "CVE-2018-0762", "CVE-2018-0766",
                "CVE-2018-0767", "CVE-2018-0769", "CVE-2018-0770", "CVE-2018-0772",
                "CVE-2018-0776", "CVE-2018-0777", "CVE-2018-0780", "CVE-2018-0803",
                "CVE-2018-0781", "CVE-2017-5753", "CVE-2017-5715", "CVE-2017-5754");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"$Date: 2018-01-05 04:43:40 +0100 (Fri, 05 Jan 2018) $");
  script_tag(name:"creation_date", value:"2018-01-04 17:36:12 +0530 (Thu, 04 Jan 2018)");
  script_name("Microsoft Windows Multiple Vulnerabilities (KB4056890)");
  script_tag(name:"summary", value:"This host is missing a critical security
  update according to Microsoft KB4056890");
  script_tag(name:"vuldetect", value:"Get the vulnerable file version and
  check appropriate patch is applied or not.");
  script_tag(name:"insight", value:"Multiple flaws exists due to,
  - Microsoft Edge does not properly enforce cross-domain policies.
  - The scripting engine handles objects in memory in Microsoft Edge.
  - Windows Adobe Type Manager Font Driver (ATMFD.dll) fails to properly
    handle objects in memory.
  - Microsoft Edge PDF Reader improperly handles objects in memory.
  - Windows kernel fails to properly handle objects in memory.
  - An error in the way that the Windows Kernel API enforces permissions.
  - An error in the Microsoft Server Message Block (SMB) Server when an attacker
    with valid credentials attempts to open a specially crafted file over the SMB
    protocol on the same machine.
  - An error in the Windows kernel.
  - Multiple errors leading to 'speculative execution side-channel attacks' that
    affect many modern processors and operating systems including Intel, AMD, and ARM.");
  script_tag(name:"impact", value:"Successful exploitation will allow an attacker
  to elevate privileges, execute arbitrary code in the context of the current
  user, potentially read data that was not intended to be disclosed, impersonate
  processes, interject cross-process communication, or interrupt system
  functionality, bypass certain security checks in the operating system and can
  cause a target system to stop responding and can be used to read the content of
  memory across a trusted boundary and can therefore lead to information disclosure
  and some unspecified impacts too.
  Impact Level: System");
  script_tag(name:"affected", value:"Microsoft Windows Server 2016
  Microsoft Windows 10 Version 1607 x32/x64.");
  script_tag(name:"solution", value:"Run Windows Update and update the
  listed hotfixes or download and update mentioned hotfixes in the advisory
  from the below link,
  https://support.microsoft.com/en-us/help/4056890");
  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");
  script_xref(name : "URL" , value : "https://support.microsoft.com/en-us/help/4056890");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2018 Greenbone Networks GmbH");
  script_family("Windows : Microsoft Bulletins");
  script_dependencies("secpod_reg_enum.nasl");
  script_mandatory_keys("SMB/WindowsVersion");
  exit(0);
}

Leave a Reply