=====================================================================
                                   CERT-Renater

                        Note d'Information No. 2010/VULN537
_____________________________________________________________________

DATE                      : 15/12/2010

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Windows XP, Windows Server 2003, Windows Vista,
                             Windows Server 2008, Windows 7
                             running Windows Address Book.

======================================================================
KB2423089
http://www.microsoft.com/technet/security/Bulletin/MS10-096.mspx
______________________________________________________________________

Microsoft Security Bulletin MS10-096 - Important
Vulnerability in Windows Address Book Could Allow Remote Code Execution
(2423089)

Version: 1.0

General Information

Executive Summary

  This security update resolves a publicly disclosed vulnerability in Windows
  Address Book. The vulnerability could allow remote code execution if a user
  opens a Windows Address Book file located in the same network folder as a
  specially crafted library file. For an attack to be successful, a user must
  visit an untrusted remote file system location or WebDAV share and open a
  document from this location that is then loaded by a vulnerable application.

  This security update is rated Important for all supported releases of
  Microsoft Windows. For more information, see the subsection, Affected and
  Non-Affected Software, in this section.

  The security update addresses the vulnerability by correcting the manner in
  which the Windows Address Book loads external libraries. For more information
  about the vulnerability, see the Frequently Asked Questions (FAQ) subsection
  for the specific vulnerability entry under the next section, Vulnerability
  Information.

Affected Software

  Windows XP Service Pack 3
  Windows XP Professional x64 Edition Service Pack 2
  Windows Server 2003 Service Pack 2
  Windows Server 2003 x64 Edition Service Pack 2
  Windows Server 2003 with SP2 for Itanium-based Systems
  Windows Vista Service Pack 1
  Windows Vista Service Pack 2
  Windows Vista x64 Edition Service Pack 1
  Windows Vista x64 Edition Service Pack 2
  Windows Server 2008 for 32-bit Systems **
  Windows Server 2008 for 32-bit Systems Service Pack 2**
  Windows Server 2008 for x64-based Systems**
  Windows Server 2008 for x64-based Systems Service Pack 2**
  Windows Server 2008 for Itanium-based Systems
  Windows Server 2008 for Itanium-based Systems Service Pack 2
  Windows 7 for 32-bit Systems
  Windows 7 for x64-based Systems
  Windows Server 2008 R2 for x64-based Systems**
  Windows Server 2008 R2 for Itanium-based Systems

    **Server Core installation not affected.

Vulnerability Information

Insecure Library Loading Vulnerability - CVE-2010-3147

  A remote code execution vulnerability exists in the way that Windows Address
  Book handles the loading of DLL files. An attacker who successfully exploited
  this vulnerability could take complete control of an affected system. An
  attacker could then install programs; view, change, or delete data; or create
  new accounts with full user rights. Users whose accounts are configured to
  have fewer user rights on the system could be less impacted than users who
  operate with administrative user rights.


======================================================================

          =========================================================
          Les serveurs de référence du CERT-Renater
          http://www.urec.fr/securite
          http://www.cru.fr/securite
          http://www.renater.fr
          =========================================================
          + CERT-RENATER          | tel : 01-53-94-20-44          +
          + 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
          + 75013 Paris           | email: certsvp@renater.fr     +
          =========================================================