=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2010/VULN295
_____________________________________________________________________

DATE                      : 11/08/2010

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Windows XP, Windows Server 2003, Windows Vista,
                             Windows Server 2008, Windows 7
                             running Microsoft .NET Framework, Microsoft Silverlight.

======================================================================
KB2265906
http://www.microsoft.com/technet/security/Bulletin/MS10-060.mspx
______________________________________________________________________

Microsoft Security Bulletin MS10-060 - Critical
Vulnerabilities in the Microsoft .NET Common Language Runtime and in
Microsoft Silverlight Could Allow Remote Code Execution (2265906)

Version: 1.0

General Information

Executive Summary

This security update resolves one publicly disclosed vulnerability and one
privately reported vulnerability in Microsoft .NET Framework and Microsoft
Silverlight. The vulnerabilities could allow remote code execution on a client
system if a user views a specially crafted Web page using a Web browser that
can run XAML Browser Applications (XBAPs) or Silverlight applications, or if
an attacker succeeds in convincing a user to run a specially crafted Microsoft
.NET application. Users whose accounts are configured to have fewer user
rights on the system could be less impacted than users who operate with
administrative user rights. The vulnerabilities could also allow remote code
execution on a server system running IIS, if that server allows processing
ASP.NET pages and an attacker succeeds in uploading a specially crafted
ASP.NET page to that server and executing the page, as could be the case in a
Web hosting scenario.

This security update is rated Critical for all affected releases of Microsoft
.NET Framework for Windows XP, Windows Server 2003, Windows Vista, Windows
Server 2008, Windows 7, and Windows Server 2008 R2; Microsoft Silverlight 2;
and Microsoft Silverlight 3. For more information, see the subsection,
Affected and Non-Affected Software, in this section.

The security update addresses the vulnerabilities by modifying the way that
Microsoft Silverlight handles pointers and Microsoft .NET CLR handles
interfaces. For more information about the vulnerabilities, see the Frequently
Asked Questions (FAQ) subsection for the specific vulnerability entry under
the next section, Vulnerability Information.

Affected Software

  Windows XP Professional x64 Edition Service Pack 2
  Windows Server 2003
  Windows Server 2003 Service Pack 2
  Windows Server 2003 x64 Edition Service Pack 2
  Windows Server 2003 with SP2 for Itanium-based Systems
  Windows Vista
  Windows Vista Service Pack 1
  Windows Vista Service Pack 2
  Windows Vista x64 Edition Service Pack 1
  Windows Vista x64 Edition Service Pack 2
  Windows Server 2008
  Windows Server 2008 for 32-bit Systems
  Windows Server 2008 for 32-bit Systems Service Pack 2
  Windows Server 2008 for x64-based Systems
  Windows Server 2008 for x64-based Systems Service Pack 2
  Windows Server 2008 for Itanium-based Systems
  Windows Server 2008 for Itanium-based Systems Service Pack 2
  Windows 7
  Windows 7 for 32-bit Systems
  Windows 7 for x64-based Systems
  Windows Server 2008 R2
  Windows Server 2008 R2 for x64-based Systems
  Windows Server 2008 R2 for Itanium-based Systems

Vulnerability Information

Microsoft Silverlight Memory Corruption Vulnerability - CVE-2010-0019

  A remote code execution vulnerability exists in the way that Microsoft
  Silverlight handles pointers. The vulnerability could allow remote code
  execution if a user visit a specially crafted Web site that contains
  Silverlight content.

Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate
Vulnerability - CVE-2010-1898

  A remote code execution vulnerability exists in the Microsoft .NET Framework
  that can allow a specially crafted Microsoft .NET application or a specially
  crafted Silverlight application to access memory, leading to arbitrary
  unmanaged code execution.
======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 151 bd de l'Hopital   | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================