===================================================================== CERT-Renater Note d'Information No. 2011/VULN203 _____________________________________________________________________ DATE : 09/03/2011 HARDWARE PLATFORM(S) : / OPERATING SYSTEM(S) : Systems running Microsoft Groove 2007. ====================================================================== KB2494047 http://www.microsoft.com/technet/security/Bulletin/MS11-016.mspx ______________________________________________________________________ Microsoft Security Bulletin MS11-016 - Important Vulnerability in Microsoft Groove Could Allow Remote Code Execution (2494047) Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in Microsoft Groove that could allow remote code execution if a user opens a legitimate Groove-related file that is located in the same network directory as a specially crafted library file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. This security update is rated Important for Microsoft Groove 2007 Service Pack 2. For more information, see the subsection, Affected and Non-Affected Software, in this section. The update addresses this vulnerability by correcting the manner in which Microsoft Groove 2007 loads external libraries. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information. Affected Software Microsoft Groove 2007 Service Pack 2 (KB2494047) Vulnerability Information Microsoft Groove Insecure Library Loading Vulnerability - CVE-2010-3146 A remote code execution vulnerability exists in the way that Microsoft Groove 2007 handles the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. ====================================================================== ========================================================= Les serveurs de référence du CERT-Renater http://www.urec.fr/securite http://www.cru.fr/securite http://www.renater.fr ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23 - 25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email: certsvp@renater.fr + =========================================================