| Bulletin ID | Vulnerability Title | CVE ID | Exploitability Index Assessment |
|
SMB Client Race Condition Vulnerability |
1 – Consistent exploit code likely |
||
|
CSRSS Local Privilege Elevation Vulnerability |
1 – Consistent exploit code likely |
||
|
URL Validation Vulnerability |
1 – Consistent exploit code likely |
||
|
PowerPoint LinkedSlideAtom Heap Overflow Vulnerability |
1 – Consistent exploit code likely |
||
|
PowerPoint OEPlaceholderAtom ‘placementId’ Invalid Array Indexing Vulnerability |
1 – Consistent exploit code likely |
||
|
PowerPoint OEPlaceholder Atom Use After Free Vulnerability |
1 – Consistent exploit code likely |
||
|
PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability |
1 – Consistent exploit code likely |
||
|
Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability |
1 – Consistent exploit code likely |
||
|
SMB NTLM Authentication Lack of Entropy Vulnerability |
1 – Consistent exploit code likely |
||
|
Windows Kernel Exception Handler Vulnerability |
1 – Consistent exploit code likely |
||
|
MSO.DLL Buffer Overflow Vulnerability |
1 – Consistent exploit code likely |
||
|
DirectShow Heap Overflow Vulnerability |
1 – Consistent exploit code likely |
||
|
SMB Client Pool Corruption Vulnerability |
2 – Inconsistent exploit code likely |
||
|
SMB Pathname Overflow Vulnerability |
2 – Inconsistent exploit code likely |
||
|
SMB Memory Corruption Vulnerability |
2 – Inconsistent exploit code likely |
||
|
MS Paint Integer Overflow Vulnerability |
2 – Inconsistent exploit code likely |
||
|
PowerPoint File Path Handling Buffer Overflow Vulnerability |
2 – Inconsistent exploit code likely |
||
|
Windows Kernel Double Free Vulnerability |
2 – Inconsistent exploit code likely |
||
|
ICMPv6 Router Advertisement Vulnerability |
2 – Inconsistent exploit code likely |
||
|
Header MDL Fragmentation Vulnerability |
2 – Inconsistent exploit code likely |
||
|
ICMPv6 Route Information Vulnerability |
2 – Inconsistent exploit code likely |
||
|
SMB Null Pointer Vulnerability |
3 – Functioning exploit code unlikely |
||
|
Hyper-V Instruction Set Validation Vulnerability |
3 – Functioning exploit code unlikelych Tuesday, Patch tuesday updates, Patch Tuesday 2010, February 2010 Patch Tuesday, MS Patch Tuesday |
||
|
Kerberos Null Pointer Dereference Vulnerability |
3 – Functioning exploit code unlikely |
||
|
TCP/IP Selective Acknowledgement Vulnerability |
3 – Functioning exploit code unlikely |
For any assistance on patching feel free to contact desktopcentral-support@manageengine.com
Happy Patching.
cheers,
