Trend Micro Security

MS12-083：IP-HTTPS コンポーネントの脆弱性により、セキュリティ機能のバイパスが起こる (2765809)

2012年12月12日
  危険度: : 高
  CVE識別番号: CVE-2012-2549

  概要

This patch addresses a vulnerability in Microsoft Windows, which could bypass the security feature via a revoked certificate to an IP-HTTPS server used in Microsoft DirectAccess deployments. Accordingly, this vulnerability can be exploited when an attacker use a certificate issued from the domain for IP-HTTPS server authentication.

  トレンドマイクロの対策

  影響を受けるソフトウェア

  • Windows Server 2008 R2 for x64-based Systems
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for Itanium-based Systems
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  • Windows Server 2012