Qualys Vulnerability R&D Lab has released new vulnerability checks in the Qualys Cloud Platform to protect organizations against 46 vulnerabilities that were fixed in 13 bulletins announced today by Microsoft. Customers can immediately audit their networks for these and other new vulnerabilities by accessing their Qualys subscription. Visit Qualys Security Blog to prioritize remediation.
Non-Qualys customers can audit their network for these and other vulnerabilities by signing up for a Qualys Free Trial, or by trying Qualys Community Edition.
Microsoft has released 13 security bulletins to fix newly discovered flaws in their software. Qualys has released the following checks for these new vulnerabilities:
Affected Versions:-
Microsoft Office 2007
Microsoft Office 2010, Microsoft Excel 2010, Microsoft PowerPoint 2010, Microsoft Word 2010
Microsoft Office 2013, Microsoft Excel 2013, Microsoft PowerPoint 2013, Microsoft Word 2013
Microsoft Office 2013 RT, Microsoft Excel 2013 RT, Microsoft Word 2013 RT
Microsoft Office for Mac 2011, Microsoft Excel for Mac 2011, Microsoft PowerPoint for Mac 2011, Microsoft Word for Mac 2011
Microsoft PowerPoint Viewer
Word Automation Services on Microsoft SharePoint Server 2010, Excel Services on Microsoft SharePoint Server 2010
Word Automation Services on Microsoft SharePoint Server 2013, Excel Services on Microsoft SharePoint Server 2013
Microsoft Office Web Apps 2010, Microsoft Excel Web App 2010
Word Automation Services on Microsoft SharePoint Server 2013
Microsoft Office Web Apps Server 2013
Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2010
Microsoft SharePoint Server 2013
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-046 Microsoft Office 2007 Service Pack 3
MS15-046 Microsoft Office 2010 Service Pack 2 (32-bit editions)(Microsoft Excel 2010 Service Pack 2 (32-bit editions))
MS15-046 Microsoft Office 2010 Service Pack 2 (32-bit editions)(Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions))
MS15-046 Microsoft Office 2010 Service Pack 2 (32-bit editions)(Microsoft Word 2010 Service Pack 2 (32-bit editions))
MS15-046 Microsoft Office 2010 Service Pack 2 (32-bit editions)
MS15-046 Microsoft Office 2010 Service Pack 2 (32-bit editions)
MS15-046 Microsoft Office 2010 Service Pack 2 (32-bit editions)
MS15-046 Microsoft Office 2010 Service Pack 2 (64-bit editions)(Microsoft Excel 2010 Service Pack 2 (64-bit editions))
MS15-046 Microsoft Office 2010 Service Pack 2 (64-bit editions)(Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions))
MS15-046 Microsoft Office 2010 Service Pack 2 (64-bit editions)(Microsoft Word 2010 Service Pack 2 (64-bit editions))
MS15-046 Microsoft Office 2010 Service Pack 2 (64-bit editions)
MS15-046 Microsoft Office 2010 Service Pack 2 (64-bit editions)
MS15-046 Microsoft Office 2010 Service Pack 2 (64-bit editions)
MS15-046 Microsoft Office 2013 Service Pack 1 (32-bit editions)(Microsoft Excel 2013 Service Pack 1 (32-bit editions))
MS15-046 Microsoft Office 2013 Service Pack 1 (32-bit editions)(Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions))
MS15-046 Microsoft Office 2013 Service Pack 1 (32-bit editions)(Microsoft Word 2013 Service Pack 1 (32-bit editions))
MS15-046 Microsoft Office 2013 Service Pack 1 (32-bit editions)
MS15-046 Microsoft Office 2013 Service Pack 1 (64-bit editions)(Microsoft Excel 2013 Service Pack 1 (64-bit editions))
MS15-046 Microsoft Office 2013 Service Pack 1 (64-bit editions)(Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions))
MS15-046 Microsoft Office 2013 Service Pack 1 (64-bit editions)(Microsoft Word 2013 Service Pack 1 (64-bit editions))
MS15-046 Microsoft Office 2013 Service Pack 1 (64-bit editions)
MS15-046 Microsoft Office Web Apps 2010 Service Pack 2(Microsoft Excel Web Apps 2010 Service Pack 2)
MS15-046 Microsoft Office Web Apps 2010 Service Pack 2
MS15-046 Microsoft Office Web Apps Server 2013 Service Pack 1
MS15-046 Microsoft Office for Mac 2011(Microsoft Excel for Mac 2011)
MS15-046 Microsoft Office for Mac 2011(Microsoft PowerPoint for Mac 2011)
MS15-046 Microsoft Office for Mac 2011(Microsoft Word for Mac 2011)
MS15-046 Microsoft Office for Mac 2011
MS15-046 Microsoft PowerPoint Viewer
MS15-046 Microsoft SharePoint Server 2010 Service Pack 2(Excel Services)
MS15-046 Microsoft SharePoint Server 2010 Service Pack 2(Microsoft SharePoint Foundation 2010 Service Pack 2)
MS15-046 Microsoft SharePoint Server 2010 Service Pack 2(Word Automation Services)
MS15-046 Microsoft SharePoint Server 2013 Service Pack 1(Excel Services)
MS15-046 Microsoft SharePoint Server 2013 Service Pack 1(Word Automation Services)
MS15-046 Microsoft SharePoint Server 2013 Service Pack 1
MS15-046
MS15-046
This security update is rated Important for supported editions of Windows 8, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-052 Windows 8 for 32-bit Systems
MS15-052 Windows 8 for x64-based Systems
MS15-052 Windows 8.1 for 32-bit Systems
MS15-052 Windows 8.1 for x64-based Systems
MS15-052 Windows Server 2012
MS15-052 Windows Server 2012
MS15-052 Windows Server 2012 R2
MS15-052 Windows Server 2012 R2
The vulnerability exists when Windows attempts to access a specially crafted .msc file to retrieve the icon information, and then fails to properly validate a destination buffer resulting in a denial of service.
This security update is rated Important for all supported editions of Microsoft Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-054
A security feature bypass exists when the JScript and VBScript engines fail to use the Address Space Layout Randomization (ASLR) security feature, allowing an attacker to more reliably predict the memory offsets of specific instructions in a given call stack. (CVE-2015-1686)
Microsoft has released an update that addresses the ASLR bypasses by helping to ensure that affected versions of JScript and VBScript properly implement the ASLR security feature.
This security update is rated Important for affected versions of the JScript and VBScript scripting engines on supported editions of Windows Server 2003, Windows Vista, Windows Server 2008, and Server Core installations of Windows Server 2008 R2.
Workaround:
1) Restrict access to VBScript.dll
Impact of Workaround #1: Websites that use VBScript may not work properly.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-053 Windows Server 2003 Service Pack 2(JScript 5.6 and VBScript 5.6)
MS15-053 Windows Server 2003 Service Pack 2(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2003 with SP2 for Itanium-based Systems(JScript 5.6 and VBScript 5.6)
MS15-053 Windows Server 2003 with SP2 for Itanium-based Systems(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2003 x64 Edition Service Pack 2(JScript 5.6 and VBScript 5.6)
MS15-053 Windows Server 2003 x64 Edition Service Pack 2(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(JScript 5.8 and VBScript 5.8)
MS15-053 Windows Server 2008 for 32-bit Systems Service Pack 2(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2008 for Itanium-based Systems Service Pack 2(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2008 for x64-based Systems Service Pack 2(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Vista Service Pack 2(JScript 5.7 and VBScript 5.7)
MS15-053 Windows Vista x64 Edition Service Pack 2(JScript 5.7 and VBScript 5.7)
This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.
This security update is rated Critical for Internet Explorer 6 (IE 6), Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows clients, and Moderate for Internet Explorer 6 (IE 6), Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows servers
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-043 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 10)
MS15-043 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 11)
MS15-043 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 8)
MS15-043 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 9)
MS15-043 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 10)
MS15-043 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 11)
MS15-043 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 8)
MS15-043 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 9)
MS15-043 Windows 8 for 32-bit Systems(Internet Explorer 10)
MS15-043 Windows 8 for x64-based Systems(Internet Explorer 10)
MS15-043 Windows 8.1 for 32-bit Systems(Internet Explorer 11)
MS15-043 Windows 8.1 for x64-based Systems(Internet Explorer 11)
MS15-043 Windows Server 2003 Service Pack 2(Internet Explorer 6)
MS15-043 Windows Server 2003 Service Pack 2(Internet Explorer 7)
MS15-043 Windows Server 2003 Service Pack 2(Internet Explorer 8)
MS15-043 Windows Server 2003 with SP2 for Itanium-based Systems(Internet Explorer 6)
MS15-043 Windows Server 2003 with SP2 for Itanium-based Systems(Internet Explorer 7)
MS15-043 Windows Server 2003 x64 Edition Service Pack 2(Internet Explorer 6)
MS15-043 Windows Server 2003 x64 Edition Service Pack 2(Internet Explorer 7)
MS15-043 Windows Server 2003 x64 Edition Service Pack 2(Internet Explorer 8)
MS15-043 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1(Internet Explorer 8)
MS15-043 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 10)
MS15-043 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 11)
MS15-043 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 8)
MS15-043 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 9)
MS15-043 Windows Server 2008 for 32-bit Systems Service Pack 2(Internet Explorer 7)
MS15-043 Windows Server 2008 for 32-bit Systems Service Pack 2(Internet Explorer 8)
MS15-043 Windows Server 2008 for 32-bit Systems Service Pack 2(Internet Explorer 9)
MS15-043 Windows Server 2008 for Itanium-based Systems Service Pack 2(Internet Explorer 7)
MS15-043 Windows Server 2008 for x64-based Systems Service Pack 2(Internet Explorer 7)
MS15-043 Windows Server 2008 for x64-based Systems Service Pack 2(Internet Explorer 8)
MS15-043 Windows Server 2008 for x64-based Systems Service Pack 2(Internet Explorer 9)
MS15-043 Windows Server 2012(Internet Explorer 10)
MS15-043 Windows Server 2012 R2(Internet Explorer 11)
MS15-043 Windows Vista Service Pack 2(Internet Explorer 7)
MS15-043 Windows Vista Service Pack 2(Internet Explorer 8)
MS15-043 Windows Vista Service Pack 2(Internet Explorer 9)
MS15-043 Windows Vista x64 Edition Service Pack 2(Internet Explorer 7)
MS15-043 Windows Vista x64 Edition Service Pack 2(Internet Explorer 8)
MS15-043 Windows Vista x64 Edition Service Pack 2(Internet Explorer 9)
Microsoft has released an update that addresses the vulnerability by correcting the way that the SCM verifies impersonation levels.
This security update is rated Important for all supported editions of Microsoft Windows.
Note : Windows Server 2003 is listed as an affected product, however; Microsoft is not issuing an update for it because the comprehensive architectural changes required would jeopardize system stability and cause application compatibility problems. It is advisable to upgrade to a later operating system if you are running Windows Server 2003.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-050 Windows 7 for 32-bit Systems Service Pack 1
MS15-050 Windows 7 for x64-based Systems Service Pack 1
MS15-050 Windows 8 for 32-bit Systems
MS15-050 Windows 8 for x64-based Systems
MS15-050 Windows 8.1 for 32-bit Systems
MS15-050 Windows 8.1 for x64-based Systems
MS15-050 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-050 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-050 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-050 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-050 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-050 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-050 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-050 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-050 Windows Server 2012
MS15-050 Windows Server 2012
MS15-050 Windows Server 2012 R2
MS15-050 Windows Server 2012 R2
MS15-050 Windows Vista Service Pack 2
MS15-050 Windows Vista x64 Edition Service Pack 2
Affected Software:
This security update is rated Critical for supported releases of Microsoft Windows and all affected editions of Microsoft .NET Framework, Microsoft Office, Microsoft Lync, and Microsoft Silverlight.
An attacker who successfully exploited the vulnerability through Microsoft Office, Microsoft Visual Studio, or Microsoft Lync could gain the same user rights as the current user.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-044 Microsoft Live Meeting 2007 Console
MS15-044 Microsoft Lync 2010
MS15-044 Microsoft Lync 2010
MS15-044 Microsoft Lync 2010 Attendee
MS15-044 Microsoft Lync 2010 Attendee
MS15-044 Microsoft Lync 2013 Service Pack 1
MS15-044 Microsoft Lync 2013 Service Pack 1
MS15-044 Microsoft Lync Basic 2013 Service Pack 1
MS15-044 Microsoft Lync Basic 2013 Service Pack 1
MS15-044 Microsoft Office 2007 Service Pack 3
MS15-044 Microsoft Office 2010 Service Pack 2
MS15-044 Microsoft Office 2010 Service Pack 2
MS15-044 Microsoft Silverlight 5
MS15-044 Microsoft Silverlight 5 Developer Runtime
MS15-044 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-044 Windows 7 for 32-bit Systems Service Pack 1
MS15-044 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-044 Windows 7 for x64-based Systems Service Pack 1
MS15-044 Windows 8 for 32-bit Systems(Microsoft .NET Framework 3.5)
MS15-044 Windows 8 for 32-bit Systems
MS15-044 Windows 8 for x64-based Systems(Microsoft .NET Framework 3.5)
MS15-044 Windows 8 for x64-based Systems
MS15-044 Windows 8.1 for 32-bit Systems(Microsoft .NET Framework 3.5)
MS15-044 Windows 8.1 for 32-bit Systems
MS15-044 Windows 8.1 for x64-based Systems(Microsoft .NET Framework 3.5)
MS15-044 Windows 8.1 for x64-based Systems
MS15-044 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 3.0 Service Pack 2)
MS15-044 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 4)
MS15-044 Windows Server 2003 Service Pack 2
MS15-044 Windows Server 2003 with SP2 for Itanium-based Systems
MS15-044 Windows Server 2003 x64 Edition Service Pack 2(Microsoft .NET Framework 3.0 Service Pack 2)
MS15-044 Windows Server 2003 x64 Edition Service Pack 2(Microsoft .NET Framework 4)
MS15-044 Windows Server 2003 x64 Edition Service Pack 2
MS15-044 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-044 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-044 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-044 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 3.5.1)
MS15-044 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 3.0 Service Pack 2)
MS15-044 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-044 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-044 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-044 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-044 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 3.0 Service Pack 2)
MS15-044 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-044 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-044 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-044 Windows Server 2012(Microsoft .NET Framework 3.5)
MS15-044 Windows Server 2012
MS15-044 Windows Server 2012 (Server Core installation)(Microsoft .NET Framework 3.5)
MS15-044 Windows Server 2012 R2(Microsoft .NET Framework 3.5)
MS15-044 Windows Server 2012 R2
MS15-044 Windows Server 2012 R2 (Server Core installation)(Microsoft .NET Framework 3.5)
MS15-044 Windows Vista Service Pack 2(Microsoft .NET Framework 3.0 Service Pack 2)
MS15-044 Windows Vista Service Pack 2(Microsoft .NET Framework 4)
MS15-044 Windows Vista Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-044 Windows Vista Service Pack 2
MS15-044 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 3.0 Service Pack 2)
MS15-044 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 4)
MS15-044 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-044 Windows Vista x64 Edition Service Pack 2
This security update is rated Critical.
Affected Versions:
Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows RT, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1
Workaround:
- Do not open Windows Journal (.jnt) files that you receive from untrusted sources or that you receive unexpectedly from trusted sources.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-045 Windows 7 for 32-bit Systems Service Pack 1
MS15-045 Windows 7 for x64-based Systems Service Pack 1
MS15-045 Windows 8 for 32-bit Systems
MS15-045 Windows 8 for x64-based Systems
MS15-045 Windows 8.1 for 32-bit Systems
MS15-045 Windows 8.1 for x64-based Systems
MS15-045 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-045 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-045 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-045 Windows Server 2012
MS15-045 Windows Server 2012 R2
MS15-045 Windows Vista Service Pack 2
MS15-045 Windows Vista x64 Edition Service Pack 2
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-047 Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions)
MS15-047 Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions)
MS15-047 Microsoft SharePoint Server 2010 Service Pack 2(Microsoft SharePoint Foundation 2010 Service Pack 2)
MS15-047 Microsoft SharePoint Server 2010 Service Pack 2
MS15-047 Microsoft SharePoint Server 2013 Service Pack 1(Microsoft SharePoint Foundation 2013 Service Pack 1)
A denial of service vulnerability exists in Microsoft .NET Framework that could allow an unauthenticated attacker to degrade the performance of a .NET-enabled website and disrupt the availability of applications that use Microsoft .NET Framework. The vulnerability exists when Microsoft .NET Framework attempts to decrypt certain specially crafted XML data (CVE-2015-1672).
An elevation of privilege vulnerability exists in Microsoft .NET Framework that is caused when .NET's Windows Forms (WinForms) libraries improperly handle objects in memory (CVE-2015-1673).
This security update is rated Important for Microsoft .NET Framework 1.1 Service Pack 1, Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4, Microsoft .NET Framework 4.5, Microsoft .NET Framework 4.5.1, and Microsoft .NET Framework 4.5.2 on affected releases of Microsoft Windows.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-048 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 7 for 32-bit Systems Service Pack 1(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 7 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 8 for 32-bit Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8 for 32-bit Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8 for 32-bit Systems(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 8 for 32-bit Systems(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 8 for x64-based Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8 for x64-based Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8 for x64-based Systems(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 8 for x64-based Systems(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows 8.1 for 32-bit Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8.1 for 32-bit Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8.1 for 32-bit Systems(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows 8.1 for 32-bit Systems(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows 8.1 for x64-based Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8.1 for x64-based Systems(Microsoft .NET Framework 3.5)
MS15-048 Windows 8.1 for x64-based Systems(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows 8.1 for x64-based Systems(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 1.1 Service Pack 1)
MS15-048 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2003 Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2003 with SP2 for Itanium-based Systems(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2003 with SP2 for Itanium-based Systems(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2003 with SP2 for Itanium-based Systems(Microsoft .NET Framework 4)
MS15-048 Windows Server 2003 with SP2 for Itanium-based Systems(Microsoft .NET Framework 4)
MS15-048 Windows Server 2003 x64 Edition Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2003 x64 Edition Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2003 x64 Edition Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2003 x64 Edition Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 3.5.1)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 3.5.1)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 for 32-bit Systems Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 for Itanium-based Systems Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2008 for Itanium-based Systems Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2008 for Itanium-based Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 for Itanium-based Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2008 for x64-based Systems Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2012(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2012(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2012 (Server Core installation)(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012 (Server Core installation)(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012 (Server Core installation)(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2012 (Server Core installation)(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Server 2012 R2(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012 R2(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012 R2(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows Server 2012 R2(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows Server 2012 R2 (Server Core installation)(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012 R2 (Server Core installation)(Microsoft .NET Framework 3.5)
MS15-048 Windows Server 2012 R2 (Server Core installation)(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows Server 2012 R2 (Server Core installation)(Microsoft .NET Framework 4.5.1/4.5.2)
MS15-048 Windows Vista Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Vista Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Vista Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Vista Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Vista Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Vista Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-048 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 4)
MS15-048 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-048 Windows Vista x64 Edition Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
An elevation of privilege vulnerability exists in Microsoft Silverlight that is caused when Silverlight improperly allows applications that are intended to run at a low integrity level (very limited permissions) to be executed at a medium integrity level (permissions of the current user) or higher.
This security update is rated Important for Microsoft Silverlight 5 and Microsoft Silverlight 5 Developer Runtime when installed on Mac or all supported releases of Microsoft Windows
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-049 Microsoft Silverlight 5
MS15-049 Microsoft Silverlight 5
MS15-049 Microsoft Silverlight 5
MS15-049 Microsoft Silverlight 5 Developer Runtime
MS15-049 Microsoft Silverlight 5 Developer Runtime
MS15-049 Microsoft Silverlight 5 Developer Runtime
An elevation of privilege vulnerability exists when Windows kernel-mode drivers improperly handle objects in memory. (CVE-2015-1701)
Windows Server 2003 Service Pack 2
Windows Server 2003 R2 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 R2 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1
This security update is rated Important for all supported releases of Microsoft Windows.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-051 Windows 7 for 32-bit Systems Service Pack 1
MS15-051 Windows 7 for x64-based Systems Service Pack 1
MS15-051 Windows 8 for 32-bit Systems
MS15-051 Windows 8 for x64-based Systems
MS15-051 Windows 8.1 for 32-bit Systems
MS15-051 Windows 8.1 for x64-based Systems
MS15-051 Windows Server 2003 Service Pack 2
MS15-051 Windows Server 2003 with SP2 for Itanium-based Systems
MS15-051 Windows Server 2003 x64 Edition Service Pack 2
MS15-051 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-051 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-051 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-051 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-051 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-051 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-051 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-051 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-051 Windows Server 2012
MS15-051 Windows Server 2012
MS15-051 Windows Server 2012 R2
MS15-051 Windows Server 2012 R2
MS15-051 Windows Vista Service Pack 2
MS15-051 Windows Vista x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1
This security update is rated Important for all supported releases of Microsoft Windows.
Workaround:
Disable DHE cipher suites
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-055 Windows 7 for 32-bit Systems Service Pack 1
MS15-055 Windows 7 for x64-based Systems Service Pack 1
MS15-055 Windows 8 for 32-bit Systems
MS15-055 Windows 8 for x64-based Systems
MS15-055 Windows 8.1 for 32-bit Systems
MS15-055 Windows 8.1 for x64-based Systems
MS15-055 Windows Server 2003 Service Pack 2
MS15-055 Windows Server 2003 with SP2 for Itanium-based Systems
MS15-055 Windows Server 2003 x64 Edition Service Pack 2
MS15-055 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-055 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-055 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-055 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-055 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-055 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-055 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-055 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-055 Windows Server 2012
MS15-055 Windows Server 2012
MS15-055 Windows Server 2012 R2
MS15-055 Windows Server 2012 R2
MS15-055 Windows Vista Service Pack 2
MS15-055 Windows Vista x64 Edition Service Pack 2
These new vulnerability checks are included in Qualys vulnerability signature 2.3.10-3. Each Qualys account is automatically updated with the latest vulnerability signatures as they become available. To view the vulnerability signature version in your account, from the Qualys Help menu, select the About tab.
To perform a selective vulnerability scan, configure a scan profile to use the following options:
In addition, prior to running a scan for these new vulnerabilities, you can estimate your exposure to these new threats by running the Risk Analysis Report, available from the Qualys Vulnerability Management Reports tab.
Platforms and Platform Identification
For more information, customers may contact Qualys Technical Support.
The Qualys Cloud Platform and its integrated suite of security and compliance applications provides organizations of all sizes with a global view of their security and compliance solutions, while drastically reducing their total cost of ownership. Qualys solutions include: continuous monitoring, vulnerability management, policy compliance, PCI compliance, security assessment questionnaire, web application scanning, web application firewall, malware detection and SECURE Seal for security testing of web sites.