MALWARELIST.net – Your Information Security Source

Microsoft Security Bulletin Summary for April 2013

In March 2013, Microsoft released seven security bulletins that fixed 20 vulnerabilities.

In April 2013, Microsoft released nine security bulletins that were fixed three vulnerability high level and 11 low level risk vulnerabilities.

Bulletin: 13-028

CVE ID: CVE-2013-1303
CVE-2013-1304
Vulnerable component: Microsoft Internet Explorer
Exploit: No
Severity Rating: Critical

Vulnerability Description: Multiple vulnerabilities in Microsoft Internet Explorer

The vulnerability allows a remote user to execute arbitrary code on the target system.

1. An error in the use upon release. This can be exploited to corrupt memory and execute arbitrary code on the target system.

2. An error in the use upon release. This can be exploited to corrupt memory and execute arbitrary code on the target system.

Bulletin: 13-029

CVE ID: CVE-2013-1296
Vulnerable component: Microsoft Windows
Exploit: No
Severity Rating: Critical

The vulnerability: Execution of arbitrary code in RDP client in Microsoft Windows

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability is caused due to unsafe use of the method in Remote Desktop ActiveX component in mstscax.dll. This can be exploited via a specially crafted web-site to execute arbitrary code on the target system.

Bulletin: 13-030

CVE ID: CVE-2013-1290
Vulnerable component: Microsoft SharePoint Server
Exploit: No
Severity Rating: Important

The vulnerability: Disclosure of sensitive data in Microsoft SharePoint Server

The vulnerability allows a remote user to gain access to sensitive data on the system.

The vulnerability is caused due to the application provides access to the SharePoint list by default. A remote user can gain access to sensitive data.

Successful exploitation must pass an authentication request Site SharePoint, as well as to know the address or location of the SharePoint list.

Bulletin: 13-031

CVE ID: CVE-2013-1284
CVE-2013-129
Vulnerable component: Microsoft Windows
Exploit: No
Severity Rating: Important

Description of Vulnerability: privilege escalation Microsoft Windows 8/2012

Vulnerability allows local users to gain escalated privileges.

An error in the processing status of the operation of objects in memory. A local user can gain escalated privileges on the system.

Bulletin: 13-032

CVE ID: CVE-2013-1282
Vulnerable component: Microsoft Windows
Exploit: No
Severity Rating: Important

The vulnerability: Denial of Service in Active Directory in Microsoft Windows

The vulnerability allows a remote user to cause a denial-of-service systems.

The vulnerability is caused due to an error when processing LDAP requests. This can be exploited to crash the system.

Bulletin: 13-033

CVE ID: CVE-2013-1295
Vulnerable component: Microsoft Windows
Exploit: No
Severity Rating: Important

Description of Vulnerability: privilege escalation CSRSS subsystem in Microsoft Windows

Vulnerability allows local users to gain escalated privileges.

The vulnerability is caused due to an unspecified error in Windows CSRSS. A local user can gain escalated privileges on the system.

Bulletin: 13-034

CVE ID: CVE-2013-0078
Vulnerable component: Microsoft Windows
Exploit: No
Severity Rating: Important

Description of Vulnerability: privilege escalation in Windows Defender

Vulnerability allows local users to gain escalated privileges.

The vulnerability is caused due to an error when processing file names in Microsoft Antimalware Client. A local user may be exploited to increase the file escalated privileges.

Bulletin: 13-035

CVE ID: CVE-2013-1289
Vulnerable component: Microsoft Windows

Affected products:

– Microsoft InfoPath 2010
– Microsoft Office SharePoint Server 2010
– Microsoft Groove Server 2010
– Microsoft SharePoint Foundation 2010
– Microsoft Office Web Apps 2010

Exploit: Yes
Severity Rating: Important

Description of Vulnerability: cross-site scripting filter component HTML code in Microsoft products

The vulnerability allows malicious people to conduct XSS attacks.

An error in the component filter HTML code when processing strings. This can be exploited to execute arbitrary HTML and script code in the uyavimoy system in context of the user.

Note: The vulnerability is being actively exploited in the present.

Bulletin: 13-036

CVE ID: CVE-2013-1283
CVE-2013-1291
CVE-2013-1292
CVE-2013-1293
Vulnerable component: Microsoft Windows
Exploit: No
Severity Rating: Important

Description:

– Vulnerability in the processing of OpenType fonts in Microsoft Windows
– A null pointer dereference in the NTFS-driver in Microsoft Windows
– Privilege escalation in Microsoft Windows

1. The vulnerability allows a remote user to cause a denial-of-service systems.
The vulnerability is caused due to an unspecified error in the processing of OpenType fonts. This can be exploited via a specially crafted font file to crash the system.

Note: The vulnerability only applies to 32-bit systems.

2. Vulnerability allows local users to gain escalated privileges.

An error null pointer dereference in the NTFS-driver. A local user can gain escalated privileges on the system.

3. The vulnerability could allow a local user to execute arbitrary code on the target system.

An error in the processing of the operation status of memory objects. A local user can escalate privileges on the system.

4. The vulnerability could allow a local user to execute arbitrary code on the target system.

An error in the processing of the operation status of memory objects. A local user can escalate privileges on the system.

Note that the vulnerability CVE-2013-1289 is actively operated at present.

Malwarelist.net encourages his readers to install security patches as soon as possible.

Link: http://technet.microsoft.com/en-us/security/bulletin/ms13-apr