January 2016 - Microsoft Releases 9 Security Advisories

  CVE Identifier: CVE-2016-0002, CVE-2016-0005, CVE-2016-0003, CVE-2016-0024, CVE-2016-0002, CVE-2015-6117, CVE-2016-0010, CVE-2016-0011, CVE-2016-0012, CVE-2016-0035, CVE-2016-0008 CVE-2016-0009, CVE-2016-0034, CVE-2016-0014, CVE-2016-0015, CVE-2016-0016, CVE-2016-0018,
  Advisory Date: JAN 13, 2016

  DESCRIPTION

Microsoft addresses the following vulnerabilities in its January batch of patches:

  • (MS16-001) Cumulative Security Update for Internet Explorer (3124903)
    Risk Rating: Critical

    This security update resolves vulnerabilities in Internet Explorer. The more severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.


  • (MS16-002) Cumulative Security Update for Microsoft Edge (3124904)
    Risk Rating: Critical

    This security update resolves vulnerabilities in Microsoft Edge. The vulnerabilities could allow attacker remote code execution if a user views a maliciously-crafted webpage using Microsoft Edge. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user.


  • (MS16-003) Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540)
    Risk Rating: Critical

    This security update resolves a vulnerability in the VBScript scripting engine in Microsoft Windows. The vulnerability could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.


  • (MS16-004) Security Update for Microsoft Office to Address Remote Code Execution (3124585)
    Risk Rating: Critical

    This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user.


  • (MS16-005) Security Update for Windows Kernel-Mode Drivers to Address Remote Code Execution (3124584)
    Risk Rating: Critical

    This security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow remote code execution if a user visits a malicious website.


  • (MS16-006) Security Update for Silverlight to Address Remote Code Execution (3126036)
    Risk Rating: Critical

    This security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow remote code execution if a user visits a compromised website that contains a specially crafted Silverlight application. An attacker would have no way to force users to visit a compromised website.


  • (MS16-007) Security Update for Microsoft Windows to Address Remote Code Execution (3124901) (3108670)
    Risk Rating: Important

    This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution.


  • (MS16-008) Security Update for Windows Kernel to Address Elevation of Privilege (3124605)
    Risk Rating: Important

    This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application.


  • (MS16-010) Security Update for Microsoft Windows to Address Remote Code Execution (3116162)
    Risk Rating: Important

    This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow spoofing if Outlook Web Access (OWA) fails to properly handle web requests, and sanitize user input and email content.


  TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using the Vulnerability Protection product or OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date Vulnerability Protection and IDF Compatibility
MS16-002 CVE-2016-00033 1007372 Microsoft Edge Memory Corruption Vulnerability (CVE-2016-0003) 12-Jan-16 YES
MS16-007 CVE-2016-0014, CVE-2016-0016, CVE-2016-0018 1007370 Microsoft Windows DLL Loading Vulnerabilities Over WebDAV (MS16-007) 12-Jan-16 YES
MS16-004 CVE-2016-0035 1007375 Microsoft Office Memory Corruption Vulnerability (CVE-2016-0035) 12-Jan-16 YES
MS16-007 CVE-2016-0014, CVE-2016-0016, CVE-2016-0018 1007369 Microsoft Windows DLL Loading Vulnerabilities Over Network Share (MS16-007) 12-Jan-16 YES
MS16-007 CVE-2016-0015 1007368 Microsoft DirectShow Heap Corruption Vulnerability (CVE-2016-0015) 12-Jan-16 YES
MS16-004 CVE-2016-0010 1007373 Microsoft Office Memory Corruption Vulnerability (CVE-2016-0010) 12-Jan-16 YES
MS16-001 CVE-2016-0005 1007363 Microsoft Internet Explorer Same Origin Policy Bypass Vulnerability (CVE-2016-0005) 12-Jan-16 YES
MS16-004 CVE-2016-0012 1007374 Microsoft Office ASLR Bypass Vulnerability (CVE-2016-0012) 12-Jan-16 YES
MS16-001, MS16-003 CVE-2016-0002 1007362 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2016-0002) 12-Jan-16 YES
MS16-006 CVE-2016-0034) 1007362 Microsoft Silverlight Runtime Remote Code Execution Vulnerability (CVE-2016-0034) 12-Jan-16 YES
MS16-002 CVE-2016-0024 1007378 Microsoft Edge Memory Corruption Vulnerability (CVE-2016-0024) 12-Jan-16 YES
MS16-005 CVE-2016-0008 1007364 Microsoft Windows ASLR Bypass Vulnerability (CVE-2016-0008) 12-Jan-16 YES

  SOLUTION