- Jul 22, 2014
- 2,525
Microsoft published today the June 2017 Patch Tuesday, which patches over 90 security flaws, including two vulnerabilities used in live attacks.
Windows Search Remote Code Execution Vulnerability
The first of these vulnerabilities is tracked as CVE-2017-8543. Microsoft describes the issue as following:
A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit the vulnerability, the attacker could send specially crafted SMB messages to the Windows Search service. An attacker with access to a target computer could exploit this vulnerability to elevate privileges and take control of the computer. Additionally, in an enterprise scenario, a remote unauthenticated attacker could remotely trigger the vulnerability through an SMB connection and then take control of a target computer.
The security update addresses the vulnerability by correcting how Windows Search handles objects in memory.
Patches for this flaw are available for all of Microsoft's operating systems, including old versions, such as XP and Server 2003.
LNK Remote Code Execution Vulnerability
...
Windows Search Remote Code Execution Vulnerability
The first of these vulnerabilities is tracked as CVE-2017-8543. Microsoft describes the issue as following:
A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit the vulnerability, the attacker could send specially crafted SMB messages to the Windows Search service. An attacker with access to a target computer could exploit this vulnerability to elevate privileges and take control of the computer. Additionally, in an enterprise scenario, a remote unauthenticated attacker could remotely trigger the vulnerability through an SMB connection and then take control of a target computer.
The security update addresses the vulnerability by correcting how Windows Search handles objects in memory.
Patches for this flaw are available for all of Microsoft's operating systems, including old versions, such as XP and Server 2003.
LNK Remote Code Execution Vulnerability
...
