Severity: : Critical
  Advisory Date: 11 de grudnia de 2012

  DESCRIPTION

Microsoft addresses the following vulnerabilities in its December batch of patches:


  • (MS12-077) Cumulative Security Update for Internet Explorer (2761465)
    Risk Rating: Critical

    This patch addresses vulnerabilities in Internet Explorer. When successfully exploited via a specially crafted web page, it could result to remote code execution thus compromising the security of the infected system. Read more here.


  • (MS12-078) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)
    Risk Rating: Critical

    This patch addresses two vulnerabilities in Microsoft Windows that when exploited could result to remote code execution. It can be exploited via a specially crafted document or through a malicious website with embedded TrueType or OpenType font files. Read more here.


  • (MS12-079) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)
    Risk Rating: Critical

    This patch addresses a vulnerability in Microsoft Office that could result in remote code execution when successfully exploited via a specially crafted .RTF file. Read more here.


  • (MS12-080) Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126)
    Risk Rating: Critical

    This patch addresses vulnerabilities in Microsoft Exchange Server, which could allow remote code execution on the transcoding service on the Exchange server via a specially crafted file using Outlook Web App (OWA). Read more here.


  • (MS12-081) Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857)
    Risk Rating: Critical

    This patch addresses a vulnerability in Microsoft Windows, which could be exploited when a users browses a folder/file with a specially crafted filename. Read more here.


  • (MS12-082) Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660)
    Risk Rating: Important

    This patch addresses a vulnerability in Microsoft Windows, which could allow remote code execution thus compromising the security of the infected system. Read more here.


  • (MS12-083) Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809)
    Risk Rating: Important

    This patch addresses a vulnerability in Microsoft Windows, which could bypass the security feature via a revoked certificate to an IP-HTTPS server used in Microsoft DirectAccess deployments. Read more here.


  INFORMATION EXPOSURE

Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS12-077 CVE-2012-4787 1005272 Microsoft Internet Explorer Improper Ref Counting Use After Free Vulnerability 11-Dec-12 YES
MS12-078 CVE-2012-4786 1005275 True Type Font Parsing Vulnerability 11-Dec-12 YES
CVE-2012-2556 1005273 Microsoft Windows OpenType Font Parsing Vulnerability 11-Dec-12 YES
MS12-079 CVE-2012-2539 1005271 Microsoft Word RTF 'listoverridecount' Remote Code Execution Vulnerability 11-Dec-12 YES
MS12-082 CVE-2012-1537 1005274 Microsoft Office DirectPlay Heap Overflow Vulnerability 11-Dec-12 YES
1005276 Microsoft Rich Text File DirectPlay Heap Overflow Vulnerability 11-Dec-12 YES