MS11-084: Vulnerability in Windows Kernel-Mode Drivers Could Allow Denial of Service (2617657)

NASLDB: MS11-084: Vulnerability in Windows Kernel-Mode Drivers Could Allow Denial of Service (2617657)

General

ID: 56737
Name: MS11-084: Vulnerability in Windows Kernel-Mode Drivers Could Allow Denial of Service (2617657)

Summary: Checks version of win32k.sys

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The remote Windows host contains a flaw in the Windows kernel such
that fails to properly validate array indexes when loading TrueType
font files, therefore making it vulnerable to a denial of service
attack. An attacker can exploit this issue by placing a specially
crafted TrueType font file on a network share or WebDAV location the
victim is likely to visit.

Exploiting

Exploit Available: False
Exploitability Ease: No known exploits are available

Sources

CVE: CVE-2011-2004
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2011/11/08
Patch Release: 2011/11/08
Plugin Release: 2011/11/08

Plugin

Version: 1.11
Filename: smb_nt_ms11-084.nasl
Filesize: 4108 bytes
MD5 Hash: b272fa9b380021a7ade440d3e54f0e3f

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl"