Detections
Analytics
MS KB960715: Cumulative Security Update of ActiveX Kill Bits
medium Nessus Plugin ID 35634
Language:
Synopsis
The remote Windows host is missing a security update containing ActiveX kill bits.Description
The remote host is missing a list of kill bits for ActiveX controls that are known to contain vulnerabilities.If these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose it to various security issues.
Solution
Microsoft has released an advisory for KB960715.See Also
Plugin Details
Severity: Medium
ID: 35634
File Name: smb_kb_960715.nasl
Version: 1.34
Type: local
Agent: windows
Family: Windows
Published: 2/11/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Medium
Base Score: 5.1
Temporal Score: 4.2
Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion
Exploit Available: true
Exploit Ease: Exploits are available
Exploitable With
CANVAS (D2ExploitPack)
Reference Information
CVE: CVE-2008-4252, CVE-2008-4253, CVE-2008-4254, CVE-2008-4255, CVE-2008-4256, CVE-2009-0305
BID: 33663