Vulnerabilities > CVE-2019-1255 - Unspecified vulnerability in Microsoft products

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

nessus

NVD

Published: 2019-09-23

Updated: 2021-09-09

Summary

A denial of service vulnerability exists when Microsoft Defender improperly handles files, aka 'Microsoft Defender Denial of Service Vulnerability'.

Part	Description	Count
Application	Microsoft Microsoft Windows Defender - Microsoft Forefront Endpoint Protection 2010 - Microsoft Security Essentials - Microsoft System Center Endpoint Protection * Microsoft System Center Endpoint Protection 2012	6
OS	Microsoft Microsoft Windows 10 - Microsoft Windows 10 1607 Microsoft Windows 10 1703 Microsoft Windows 10 1709 Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1903 Microsoft Windows 7 - Microsoft Windows 8.1 - Microsoft Windows RT 8.1 - Microsoft Windows Server 2008 - Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 - Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 - Microsoft Windows Server 2016 1803 Microsoft Windows Server 2016 1903 Microsoft Windows Server 2019 -	19

NASL family	Windows
NASL id	MICROSOFT_MALWARE_PROTECTION_ENGINE_1_1_16400_2.NASL
description	An elevation of privilege vulnerability exists in Microsoft Malware Protection Engine due to improper file handling. An authenticated, remote attacker can exploit this, to gain elevated privileges.
last seen	2020-06-01
modified	2020-06-02
plugin id	130091
published	2019-10-21
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/130091
title	Microsoft Malware Protection Engine Elevation of Privilege Vulnerability

id	THN:AB828E4EB75F9C7BC37B672D9FD0092E
last seen	2019-09-24
modified	2019-09-24
published	2019-09-24
reporter	The Hacker News
source	https://thehackernews.com/2019/09/windows-update-zero-day.html
title	Microsoft Releases Emergency Patches for IE 0-Day and Windows Defender Flaw