Vulnerability Team

Microsoft Malware Protection Engine is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code with LocalSystem privileges. Successful exploits will result in the complete compromise of affected computers.

Microsoft Malware Protection Engine versions 1.1.6502.0 and prior are affected.

SOLUTION: Microsoft Security Advisory (2491888)

fuente: microsoft.com 

1. Microsoft Office Drawing Exception Handling Remote Code Execution Vulnerability

Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing an unsuspecting victim to open a malicious Office file.
Successfully exploiting this issue would allow the attacker to corrupt memory and execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.

2. Microsoft Office RTF File Stack Buffer Overflow Vulnerability

Microsoft Office is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data.

An attacker can exploit this issue by enticing a victim to open a malicious RTF file or view an email in RTF format. Successfully exploiting this issue would allow the attacker to corrupt memory and execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.

3. Microsoft Office Art Drawing Record Remote Code Execution Vulnerability

Microsoft Office is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malicious Office file. Successfully exploiting this issue would allow the attacker to corrupt memory and execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.

4. Microsoft Office Large SPID Read AV Remote Code Execution Vulnerability

Microsoft Office is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malicious Office file. Successfully exploiting this issue would allow the attacker to corrupt memory and execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.


Desde Vulnerability Team exortamos a los usuarios y administradores revisar las notificaciones y aplicar las actualizaciones necesarias, para ayudar a mitigar los riesgos.

fuente: securityfocus.com

Microsoft Word Record RTF Parsing Engine Remote Memory Corruption Vulnerability

Microsoft Word HTML Linked Object Remote Memory Corruption Vulnerability
Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Microsoft Internet Explorer HTML Layout Uninitialized Memory Remote Code Execution Vulnerability

Microsoft Internet Explorer Uninitialized Memory CVE-2010-2559 Remote Code Execution Vulnerability

Microsoft Internet Explorer Race Condition CVE-2010-2558 Remote Code Execution Vulnerability

Microsoft Internet Explorer Uninitialized Memory CVE-2010-2557 Remote Code Execution Vulnerability

Microsoft Windows Movie Maker Remote Buffer Overflow Vulnerability

Microsoft Windows SMB Stack Exhaustion Denial of Service Vulnerability

Microsoft Windows SMB Variable Validation Denial of Service Vulnerability

Microsoft Windows Tracing Memory Corruption Privilege Escalation Vulnerability

Microsoft Internet Explorer Event Handler Cross Domain Information Disclosure Vulnerability

Microsoft Internet Explorer Uninitialized Memory CVE-2010-2556 Remote Code Execution Vulnerability

Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability

Microsoft Windows CVE-2010-1887 Bounds Checking Local Denial Of Service Vulnerability

Microsoft Windows SChannel Certificate Request Remote Code Execution Vulnerability

Microsoft Windows CVE-2010-1895 User Pool Overflow Local Privilege Escalation Vulnerability

Microsoft Windows Kernel Access Control Lists Local Denial of Service Vulnerability

Microsoft Windows Kernel Double Free Local Privilege Escalation Vulnerability

Microsoft Windows Kernel Threads Creation Local Privilege Escalation Vulnerability

Microsoft Windows CVE-2010-1896 User Input Validation Local Privilege Escalation Vulnerability

Microsoft Silverlight ActiveX Control Pointer Memory Corruption Vulnerability

Microsoft Word Record Parsing (CVE-2010-1900) Remote Code Execution Vulnerability

Microsoft Windows SMB Pool Overflow Remote Code Execution Vulnerability

Microsoft Windows Kernel 'CreateDIBPalette()' Function Local Privilege Escalation Vulnerability

Microsoft Windows TCP/IP Local Privilege Escalation Vulnerability


Microsoft Word Record RTF Parsing Engine Remote Heap Buffer Overflow Vulnerability

Microsoft Excel 'PivotTable Cache Data' Record Parsing Remote Code Execution Vulnerability

Microsoft Windows Tracing Registry Key ACL Privilege Escalation Vulnerability

Microsoft Windows 'xxxCreateWindowEx()' Window Creation Local Privilege Escalation Vulnerability

Microsoft MPEG Layer-3 Audio Decoder Buffer Overflow Vulnerability

Microsoft XML Core Service Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability

Microsoft Windows Cinepak Codec Media Decompression Remote Code Execution Vulnerability

Microsoft Windows 'SfnLOGONNOTIFY' Local Privilege Escalation Vulnerability


Boletin de Seguridad de Microsoft Agosto 2010

Desde Vulnerability Team exortamos a los usuarios y administradores revisar las notificaciones y aplicar las actualizaciones necesarias, para ayudar a mitigar los riesgos.

fuente: securityfocus.com