MS14-054: Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (2988948)

high Nessus Plugin ID 77574

Language:

Synopsis

The remote Windows host is affected by a privilege escalation vulnerability.

Description

The remote Windows host is affected by a privilege escalation vulnerability. The vulnerability is due to improperly conducted integrity checks on tasks by Windows Task Scheduler. An authenticated attacker can exploit this vulnerability to execute arbitrary code in the context of the local system user.

Solution

Microsoft has released a set of patches for Windows 8, 2012, 8.1, and 2012 R2.

Plugin Details

Severity: High

ID: 77574

File Name: smb_nt_ms14-054.nasl

Version: 1.7

Type: local

Agent: windows

Family: Windows : Microsoft Bulletins

Published: 9/10/2014

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 9/9/2014

Vulnerability Publication Date: 9/9/2014

Reference Information

CVE: CVE-2014-4074

BID: 69593

MSFT: MS14-054

MSKB: 2988948

Detections

Analytics