The remote Windows host is missing security update 4019214 or cumulative update 4019216. It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability exists in the     Windows COM Aggregate Marshaler due to an unspecified     flaw. A local attacker can exploit this, via a specially     crafted application, to execute arbitrary code with     elevated privileges. (CVE-2017-0213)

  - An elevation of privilege vulnerability exists in     Windows due to improper validation of user-supplied     input when loading type libraries. A local attacker can     exploit this, via a specially crafted application, to     gain elevated privileges. (CVE-2017-0214)

  - An information disclosure vulnerability exists in the     Windows kernel due to improper handling of objects in     memory. A local attacker can exploit this, via a     specially crafted application, to disclose sensitive     information. (CVE-2017-0220)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0222)

  - A remote code execution vulnerability exists in     Microsoft Internet Explorer due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     specially crafted website, to execute arbitrary code in     the context of the current user. (CVE-2017-0226)

  - A remote code execution vulnerability exists in     Microsoft browsers in the JavaScript scripting engines     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a specially crafted website     or open a specially crafted Office document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0238)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0267)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0268)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0269)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0270)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0271)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0272)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0273)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0274)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0275)

  - An information disclosure vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to disclose sensitive information.
    (CVE-2017-0276)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0277)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0278)

  - A remote code execution vulnerability exists in the     Microsoft Server Message Block 1.0 (SMBv1) server when     handling certain requests. An unauthenticated, remote     attacker can exploit this, via a specially crafted     packet, to execute arbitrary code on a target server.
    (CVE-2017-0279)

  - A denial of service vulnerability exists in Microsoft     Server Message Block (SMB) when handling a specially     crafted request to the server. An unauthenticated,     remote attacker can exploit this, via a crafted SMB     request, to cause the system to stop responding.
    (CVE-2017-0280)

Detections

Analytics

Windows Server 2012 May 2017 Security Updates

critical Nessus Plugin ID 100054

Version 1.19

Version 1.18

Version 1.19 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.18 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535