=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2010/VULN405
_____________________________________________________________________

DATE                      : 13/10/2010

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Windows XP, Windows Vista, Windows 7, Windows Server 2003,
                   Windows Server 2008 running Windows Shell, WordPad.

======================================================================
KB2405882
http://www.microsoft.com/technet/security/bulletin/MS10-083.mspx
______________________________________________________________________

Microsoft Security Bulletin MS10-083 - Important
Vulnerability in COM Validation in Windows Shell and WordPad Could Allow
Remote Code Execution (2405882)

Version: 1.0

General Information

Executive Summary

This security update resolves a privately reported vulnerability in Microsoft
Windows. The vulnerability could allow remote code execution if a user opens a
specially crafted file using WordPad or selects or opens a shortcut file that
is on a network or WebDAV share. An attacker who successfully exploited this
vulnerability could gain the same user rights as the local user. Users whose
accounts are configured to have fewer user rights on the system could be less
impacted than users who operate with administrative user rights.

This security update is rated Important for all supported releases of
Microsoft Windows. For more information, see the subsection, Affected and
Non-Affected Software, in this section.

Affected Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Vista Service Pack 1 and Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service
  Pack 2
Windows 7 for 32-bit Systems
Windows 7 for x64-based Systems
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems
  Service Pack 2
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based
  Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for
  Itanium-based Systems Service Pack 2
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for Itanium-based Systems

Vulnerability Information

COM Validation Vulnerability - CVE-2010-1263

A remote code execution vulnerability exists in the way that the Windows Shell
and WordPad validate COM object instantiation. An attacker who successfully
exploited this vulnerability could take complete control of an affected
system. An attacker could then install programs; view, change, or delete data;
or create new accounts with full user rights. Users whose accounts are
configured to have fewer user rights on the system could be less affected than
users who operate with administrative user rights.
======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================