Detections
Analytics
MS KB2491888: Microsoft Malware Protection Engine (MMPE) Privilege Escalation
high Nessus Plugin ID 52456
Language:
Synopsis
The remote host has an application that is affected by a local privilege escalation vulnerability.Description
A vulnerable version of Microsoft Malware Protection Engine (MMPE) is installed on the remote system. MMPE is typically included with Microsoft anti-malware products such as Windows Live OneCare, Microsoft Security Essentials, Microsoft Forefront Client Security, Microsoft Forefront Client Security, Microsoft Forefront Endpoint Protection 2010, and Microsoft Malicious Software Removal Tool.A local user may be able to gain local system privileges by creating a specially crafted registry key before a system is scanned using Microsoft Malware Protection Engine.
Solution
Update the malware definitions for the installed Microsoft anti- malware product.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2011/2491888
Plugin Details
Severity: High
ID: 52456
File Name: smb_kb2491888.nasl
Version: 1.13
Type: local
Agent: windows
Family: Windows
Published: 2/25/2011
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:malware_protection_engine
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Patch Publication Date: 2/23/2011
Vulnerability Publication Date: 2/23/2011
Reference Information
CVE: CVE-2011-0037
BID: 46540
MSKB: 2491888