The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3038314. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website.

Note that KB3038314 was updated on April 22, 2015, for Internet Explorer for Windows Server 2003. If this update was installed prior to April 22, it will need to be reinstalled to be fully protected.

リモートホストにインストールされた Internet Explorer のバージョンには、累積的なセキュリティ更新 3038314 がありません。このため、多数の脆弱性による影響を受けることになります。その大部分はリモートコードの実行の脆弱性です。攻撃者が、これらの脆弱性を悪用して、特別に細工された Web サイトにユーザーをアクセスさせる可能性があります。

注意：KB3038314 は、2015 年 4 月 22 日に Windows Server 2003 の Internet Explorer 用に更新されました。この更新が 4 月 22 日より前にインストールされている場合、保護を完全にするために再インストールする必要があります。

远程主机上安装的 Internet Explorer 版本缺少累积安全更新 3038314。因此，它会受到多种漏洞的影响，其中多数为远程代码执行漏洞。攻击者可通过诱使用户访问某个特别构建的网站来利用这些漏洞。

请注意，对于 Windows Server 2003 的 Internet Explorer，KB3038314 已在 2015 年 4 月 22 日更新。如果在 4 月 22 日之前安装此更新，将需要重新安装以获得完全保护。

遠端主機上安裝的 Internet Explorer 版本缺少累積安全性更新 3038314。因此會受到多個弱點影響，其中大部分是遠端程式碼執行弱點。攻擊者可能會誘騙使用者造訪特製的網站，藉此惡意利用這些弱點。

請注意，KB3038314 已於 2015 年 4 月 22 日針對 Windows Server 2003 的 Internet Explorer 更新。如果在 4 月 22 日之前安裝此更新，將需要重新安裝才能完全受到保護。

The remote host is running VLC 2.x prior to 2.0.2 and is affected by multiple vulnerabilities :

 - An invalid pointer dereference flaw exists in the 3GP file format parser. With a specially crafted 3GP file, a context-dependent attacker can potentially execute arbitrary code.
 - The libpng library used by VLC contains an out-of-bounds read flaw in the 'png_convert_to_rfc1123()' function in 'png.c' that may allow a context-dependent attacker to crash an application linked against the library or disclose memory contents.
 - The libEBML library used by VLC contains a use-after-free error in the 'EblMaster::Read()' function in 'EbmlMaster.cpp' that is triggered when handling deeply nested elements with an infinite size. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - The libEBML library used by VLC contains an out-of-bounds read condition in the 'UTFstring::UpdateFromUTF8()' function in 'EbmlUnicodeString.cpp' that is triggered when reading UTF-8 strings. This may allow a context-dependent attacker to crash an application linked against the library or potentially disclose memory contents.
 - The libpng library contains overflow conditions in the 'png_set_PLTE()' function in 'pngset.c' and 'png_get_PLTE()' function in 'pngget.c' that are triggered when handling bit depths less than 8. With a specially crafted PNG image, a context-dependent attacker can cause a buffer overflow, crashing an application linked against the library or potentially execute arbtirary code.
 - A flaw exists that allows a cross-site scripting (XSS) attack. This flaw exists because the web interface does not validate files' title metadata before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - A flaw exists that is triggered as user-supplied input is not properly validated when handling a specially crafted MP4 file. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified double-free flaw exists in the ADPCM decoder, which may allow an attacker to have an unspecified impact.
 - Multiple unspecified double-frees, integer overflows, infinite loops, read overflows, invalid frees, and division-by-zero flaws exist. No further details have been provided by the vendor.
 - A flaw exists that allows a cross-site scripting (XSS) attack. This flaw exists because the HTTP interface does not validate input before returning it to users. This may allow a remote attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - An off-by-one overflow condition exists in the RealRtsp module. The issue is triggered as user-supplied input is not properly validated. This may allow a context-dependent attacker to cause a buffer overflow, resulting in an unspecified impact.

ID	名稱	產品	系列	已發布	已更新	嚴重性
82770	MS15-032: Cumulative Security Update for Internet Explorer (3038314)	Nessus	Windows : Microsoft Bulletins	2015/4/14	2018/11/15	high
82770	MS15-032：Internet Explorer 用の累積的なセキュリティ更新（3038314）	Nessus	Windows : Microsoft Bulletins	2015/4/14	2018/11/15	high
82770	MS15-032：Internet Explorer 累积安全更新 (3038314)	Nessus	Windows : Microsoft Bulletins	2015/4/14	2018/11/15	high
82770	MS15-032：Internet Explorer 的累積安全性更新 (3038314)	Nessus	Windows : Microsoft Bulletins	2015/4/14	2018/11/15	high
9267	VLC Media Player < 2.2.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/4/22	2019/3/6	critical

偵測

搜尋 Plugin

high

high

high

high

critical