This script is Copyright (C) 2017 Tenable Network Security, Inc.
The remote Windows host has a browser plugin installed that is
affected by multiple vulnerabilities.
The remote Windows host is missing security update KB4018483. It is,
therefore, affected by multiple vulnerabilities :
- Multiple use-after-free errors exist that allow an
unauthenticated, remote attacker to -
code. (CVE-2017-3058, CVE-2017-3059, CVE-2017-3062,
- Multiple memory corruption issues exist that allow an
unauthenticated, remote attacker to execute arbitrary
code. (CVE-2017-3060, CVE-2017-3061, CVE-2017-3064)
See also :
Microsoft has released a set of patches for Windows 2012, 8.1, RT 8.1,
2012 R2, 10, and 2016.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 7.3
Public Exploit Available : true
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 99290 ()
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now