(MS13-075) Vulnerability in Microsoft Office IME (Chinese) Could Allow Elevation of Privilege (2878687)

Publish Date: 09 de października de 2013

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: : High

  CVE Kennungen: : CVE-2013-3859

  Advisory Date: 09 de października de 2013

---

  DESCRIPTION

This security update resolves a privately reported vulnerability in Microsoft Office IME (Chinese). The vulnerability could allow elevation of privilege if a logged on attacker launches Internet Explorer from the toolbar in Microsoft Pinyin IME for Simplified Chinese. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights. Only implementations of Microsoft Pinyin IME 2010 are affected by this vulnerability. Other versions of Simplified Chinese IME and other implementations of IME are not affected.

  SOLUTION

  Patch: : http://technet.microsoft.com/en-us/security/bulletin/ms13-075

  AFFECTED SOFTWARE AND VERSION:

• Microsoft Pinyin IME 2010 (32-bit version)
• Microsoft Pinyin IME 2010 (64-bit version)

Verwandte Schwachstelle

• September 2013 - Microsoft Releases 14 Security Advisories