The remote Windows host is missing security update 5034809. It is, therefore, affected by multiple vulnerabilities

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21350,     CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361, CVE-2024-21365,     CVE-2024-21366, CVE-2024-21367, CVE-2024-21368, CVE-2024-21369, CVE-2024-21370, CVE-2024-21375,     CVE-2024-21391, CVE-2024-21420)

  - Windows Kernel Information Disclosure Vulnerability (CVE-2024-21340)

  - Microsoft ActiveX Data Objects Remote Code Execution Vulnerability (CVE-2024-21349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5034809: Windows Server 2008 R2 Security Update (February 2024)

high Nessus Plugin ID 190478

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Sep 24, 2024, 10:01 PM Detection (added exclusion for Windows 7 SP1) Plugin Feed: 202409242201
Version 1.3 Jun 17, 2024, 3:35 PM Plugin metadata (add more granular CPEs to Windows OS plugins) Plugin Feed: 202406171535
Version 1.2 Mar 15, 2024, 11:10 AM IAVM reference Plugin Feed: 202403151110
Version 1.1 Feb 16, 2024, 12:17 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202402161217
Version 1.0 Feb 14, 2024, 3:36 AM New Plugin Feed: 202402140336