Microsoft CVE-2019-1347: Windows Denial of Service Vulnerability
Description
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application or to convince a user to open a specific file on a network share. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding. The update addresses the vulnerability by correcting how Windows handles objects in memory.
Solution(s)
- msft-kb4517389-5c400e97-567b-460d-bdbd-b8f6ad298c9c
- msft-kb4517389-b772c442-f33b-42f3-b4fd-6780110d6a53
- msft-kb4517389-c417813c-d3db-4b44-83f8-60de59e73b91
- msft-kb4519338-212c3c1b-d31d-4e80-a30f-ad2cddf5c7fc
- msft-kb4519338-4dc3fc62-f0c5-47fd-b788-24c7bb43bd60
- msft-kb4519338-effa0a42-b050-47d4-a23a-1f3f0a7a7195
- msft-kb4519990-a2d349fe-ee2a-4a85-be00-ee8cba079e9b
- msft-kb4519990-b8b37d2d-5063-477b-809c-baf8ce11b723
- msft-kb4519990-e54b6ac3-a904-4687-b53b-6db63a034c57
- msft-kb4519998-0c7eb702-e48b-48da-8ef8-e984aa6cb0b8
- msft-kb4519998-3e345f2b-0454-4475-968e-a723d555f2fb
- msft-kb4519998-a3faed21-d1ee-4af7-bc23-42e4de28e30c
- msft-kb4520004-173a42f8-0561-4a76-9a70-bd9cb6fa9151
- msft-kb4520004-f72dbbef-cedb-450e-927d-05414a78aded
- msft-kb4520008-60000a2c-bbc0-473e-a45f-db8e5d59d8f6
- msft-kb4520008-d876d728-1f3a-4686-ac8d-9fee971d40af
- msft-kb4520008-ff9d5ac1-9660-4a2c-8669-260891a47e33
- msft-kb4520010-50f87af3-267d-4242-9ca8-ad63233c710d
- msft-kb4520010-fe65a4a7-b1ab-44b2-9c92-16daa2ddd839
- msft-kb4520011-13958a0a-73dc-4296-b375-8ac1cd632f1b
- msft-kb4520011-c32b63ca-7b05-458e-aaa4-84400e2e6f1c
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center