December 2012 - Microsoft Releases 7 Security Advisories
Severity: CRITICAL
Advisory Date: DEC 11, 2012
DESCRIPTION
Microsoft addresses the following vulnerabilities in its December batch of patches:
- (MS12-077) Cumulative Security Update for Internet Explorer (2761465)
Risk Rating: Critical
This patch addresses vulnerabilities in Internet Explorer. When successfully exploited via a specially crafted web page, it could result to remote code execution thus compromising the security of the infected system. Read more here. - (MS12-078) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)
Risk Rating: Critical
This patch addresses two vulnerabilities in Microsoft Windows that when exploited could result to remote code execution. It can be exploited via a specially crafted document or through a malicious website with embedded TrueType or OpenType font files. Read more here. - (MS12-079) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)
Risk Rating: Critical
This patch addresses a vulnerability in Microsoft Office that could result in remote code execution when successfully exploited via a specially crafted .RTF file. Read more here. - (MS12-080) Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126)
Risk Rating: Critical
This patch addresses vulnerabilities in Microsoft Exchange Server, which could allow remote code execution on the transcoding service on the Exchange server via a specially crafted file using Outlook Web App (OWA). Read more here. - (MS12-081) Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857)
Risk Rating: Critical
This patch addresses a vulnerability in Microsoft Windows, which could be exploited when a users browses a folder/file with a specially crafted filename. Read more here. - (MS12-082) Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660)
Risk Rating: Important
This patch addresses a vulnerability in Microsoft Windows, which could allow remote code execution thus compromising the security of the infected system. Read more here. - (MS12-083) Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809)
Risk Rating: Important
This patch addresses a vulnerability in Microsoft Windows, which could bypass the security feature via a revoked certificate to an IP-HTTPS server used in Microsoft DirectAccess deployments. Read more here.
TREND MICRO PROTECTION INFORMATION
Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities.
| MS Bulletin ID | Vulnerability ID | DPI Rule Number | DPI Rule Name | Release Date | IDF Compatibility |
| MS12-077 | CVE-2012-4787 | 1005272 | Microsoft Internet Explorer Improper Ref Counting Use After Free Vulnerability | 11-Dec-12 | YES |
| MS12-078 | CVE-2012-4786 | 1005275 | True Type Font Parsing Vulnerability | 11-Dec-12 | YES |
| CVE-2012-2556 | 1005273 | Microsoft Windows OpenType Font Parsing Vulnerability | 11-Dec-12 | YES | |
| MS12-079 | CVE-2012-2539 | 1005271 | Microsoft Word RTF 'listoverridecount' Remote Code Execution Vulnerability | 11-Dec-12 | YES |
| MS12-082 | CVE-2012-1537 | 1005274 | Microsoft Office DirectPlay Heap Overflow Vulnerability | 11-Dec-12 | YES |
| 1005276 | Microsoft Rich Text File DirectPlay Heap Overflow Vulnerability | 11-Dec-12 | YES |
Featured Stories
The Mirage of AI Programming: Hallucinations and Code IntegrityThe adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.Read more
Open RAN: Attack of the xAppsThis article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handlingRead more
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking ServicesThis article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.Read more
How Residential Proxies and CAPTCHA-Solving Services Become Agents of AbuseThis article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.Read more