Internet Explorer Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems -WannaCrypt Ransomware Worm (KB4012215)

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
94.318%

CVE Information

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
22046

Patch Description
March, 2017 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems -WannaCrypt Ransomware Worm (KB4012215)

References

http://blog.inspired-sec.com/archive/2017/03/17/COM-Moniker-Privesc.html
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-DVD-MAKER-XML-EXTERNAL-ENTITY-FILE-DISCLOSURE.txt
http://pastebin.com/raw/Eztknq4s
http://www.security-assessment.com/files/documents/advisory/comparestring_infoleak.pdf
http://www.security-assessment.com/files/documents/advisory/reversesegment.pdf
http://www.securityfocus.com/bid/96023
http://www.securityfocus.com/bid/96024
http://www.securityfocus.com/bid/96033
http://www.securityfocus.com/bid/96034
http://www.securityfocus.com/bid/96057
http://www.securityfocus.com/bid/96069
http://www.securityfocus.com/bid/96077
http://www.securityfocus.com/bid/96086
http://www.securityfocus.com/bid/96094
http://www.securityfocus.com/bid/96095
http://www.securityfocus.com/bid/96098
http://www.securityfocus.com/bid/96103
http://www.securityfocus.com/bid/96599
http://www.securityfocus.com/bid/96603
http://www.securityfocus.com/bid/96604
http://www.securityfocus.com/bid/96605
http://www.securityfocus.com/bid/96606
http://www.securityfocus.com/bid/96608
http://www.securityfocus.com/bid/96610
http://www.securityfocus.com/bid/96622
http://www.securityfocus.com/bid/96623
http://www.securityfocus.com/bid/96625
http://www.securityfocus.com/bid/96627
http://www.securityfocus.com/bid/96628
http://www.securityfocus.com/bid/96630
http://www.securityfocus.com/bid/96637
http://www.securityfocus.com/bid/96638
http://www.securityfocus.com/bid/96639
http://www.securityfocus.com/bid/96640
http://www.securityfocus.com/bid/96643
http://www.securityfocus.com/bid/96644
http://www.securityfocus.com/bid/96645
http://www.securityfocus.com/bid/96661
http://www.securityfocus.com/bid/96663
http://www.securityfocus.com/bid/96665
http://www.securityfocus.com/bid/96666
http://www.securityfocus.com/bid/96667
http://www.securityfocus.com/bid/96668
http://www.securityfocus.com/bid/96669
http://www.securityfocus.com/bid/96675
http://www.securityfocus.com/bid/96678
http://www.securityfocus.com/bid/96679
http://www.securityfocus.com/bid/96680
http://www.securityfocus.com/bid/96697
http://www.securityfocus.com/bid/96700
http://www.securityfocus.com/bid/96701
http://www.securityfocus.com/bid/96703
http://www.securityfocus.com/bid/96704
http://www.securityfocus.com/bid/96705
http://www.securityfocus.com/bid/96706
http://www.securityfocus.com/bid/96707
http://www.securityfocus.com/bid/96709
http://www.securityfocus.com/bid/96713
http://www.securityfocus.com/bid/96715
http://www.securityfocus.com/bid/96722
http://www.securityfocus.com/bid/96724
http://www.securitytracker.com/id/1037845
http://www.securitytracker.com/id/1037991
http://www.securitytracker.com/id/1037992
http://www.securitytracker.com/id/1037999
http://www.securitytracker.com/id/1038001
http://www.securitytracker.com/id/1038002
http://www.securitytracker.com/id/1038006
http://www.securitytracker.com/id/1038008
http://www.securitytracker.com/id/1038012
http://www.securitytracker.com/id/1038013
http://www.securitytracker.com/id/1038014
http://www.securitytracker.com/id/1038015
http://www.securitytracker.com/id/1038016
http://www.securitytracker.com/id/1038017
http://www.securitytracker.com/id/1038018
https://0patch.blogspot.com/2017/02/0patching-0-day-windows-gdi32dll-memory.html
https://0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html
https://blogs.technet.microsoft.com/mmpc/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/
https://bugs.chromium.org/p/project-zero/issues/detail?id=1021
https://bugs.chromium.org/p/project-zero/issues/detail?id=992
https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0001
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0005
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0008
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0009
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0012
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0014
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0018
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0022
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0025
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0038
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0039
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0040
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0042
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0043
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0045
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0047
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0049
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0055
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0056
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0059
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0060
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0061
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0062
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0063
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0072
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0073
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0075
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0076
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0083
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0084
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0086
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0087
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0088
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0089
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0090
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0091
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0092
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0096
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0097
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0099
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0100
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0101
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0103
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0108
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0109
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0111
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0112
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0113
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0114
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0115
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0116
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0117
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0118
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0119
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0120
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0121
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0122
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0123
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0128
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0130
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0143
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0144
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0145
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0146
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0147
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0148
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0149
https://twitter.com/Qab/status/842506404950917120
https://www.exploit-db.com/exploits/41363/
https://www.exploit-db.com/exploits/41607/
https://www.exploit-db.com/exploits/41619/
https://www.exploit-db.com/exploits/41645/
https://www.exploit-db.com/exploits/41647/
https://www.exploit-db.com/exploits/41648/
https://www.exploit-db.com/exploits/41649/
https://www.exploit-db.com/exploits/41650/
https://www.exploit-db.com/exploits/41651/
https://www.exploit-db.com/exploits/41652/
https://www.exploit-db.com/exploits/41654/
https://www.exploit-db.com/exploits/41655/
https://www.exploit-db.com/exploits/41656/
https://www.exploit-db.com/exploits/41657/
https://www.exploit-db.com/exploits/41658/
https://www.exploit-db.com/exploits/41659/
https://www.exploit-db.com/exploits/41661/
https://www.exploit-db.com/exploits/41891/
https://www.exploit-db.com/exploits/41987/
https://www.exploit-db.com/exploits/42030/
https://www.exploit-db.com/exploits/42031/
https://www.exploit-db.com/exploits/42354/
https://www.exploit-db.com/exploits/43125/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0126
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0124
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0127
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0125