=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2009/VULN414
_____________________________________________________________________

DATE                      : 14/10/2009

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Windows 2000, Windows XP, Windows Server 2003
                              running Indexing Service ActiveX control.

======================================================================
KB969059
http://www.microsoft.com/technet/security/bulletin/ms09-057.mspx
______________________________________________________________________

Microsoft Security Bulletin MS09-057 - Important

Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)

Published: October 13, 2009

Version: 1.0

General Information

Executive Summary

  This security update resolves a privately reported vulnerability in Microsoft
  Windows. The vulnerability could allow remote code execution if an attacker
  set up a malicious Web page that invokes the Indexing Service through a call
  to its ActiveX component. This call could include a malicious URL and exploit
  the vulnerability, granting the attacker access to the client system with the
  privileges of the user browsing the Web page. Users whose accounts are
  configured to have fewer user rights on the system could be less impacted
  than users who operate with administrative user rights.

  This security update is rated Important for all supported editions of
  Microsoft Windows 2000, Windows XP, and Windows Server 2003.

  The security update addresses the vulnerability by modifying the way that the
  Indexing Service ActiveX control processes URLs. For more information about
  the vulnerability, see the Frequently Asked Questions (FAQ) subsection for
  the specific vulnerability entry under the next section, Vulnerability
  Information.

  Recommendation.  The majority of customers have automatic updating enabled and
  will not need to take any action because this security update will be
  downloaded and installed automatically. Customers who have not enabled
  automatic updating need to check for updates and install this update manually.
  For information about specific configuration options in automatic updating,
  see Microsoft Knowledge Base Article 294871.

  For administrators and enterprise installations, or end users who want to
  install this security update manually, Microsoft recommends that customers
  apply the update at the earliest opportunity using update management
  software, or by checking for updates using the Microsoft Update service.

  Known Issues. None

Affected Software

  Microsoft Windows 2000 Service Pack 4

  Windows XP Service Pack 2 and Windows XP Service Pack 3

  Windows XP Professional x64 Edition Service Pack 2

  Windows Server 2003 Service Pack 2

  Windows Server 2003 x64 Edition Service Pack 2

  Windows Server 2003 with SP2 for Itanium-based Systems

Vulnerability Information

Memory Corruption in Indexing Service Vulnerability - CVE-2009-2507

  A remote code execution vulnerability exists in the Indexing Service on
  Windows systems. The vulnerability is due to an ActiveX control included with
  the service not properly handling specifically crafted Web content. An attacker
  who successfully exploited this vulnerability could take complete control of an
  affected system.

======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 151 bd de l'Hopital   | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================