====================================================================

                             CERT-Renater

                  Note d'Information No. 2012/VULN350
____________________________________________________________________

DATE                : 12/09/2012

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Windows running
                Cisco Secure Desktop ActiveX controls,
                Cisco Hostscan ActiveX control,
                Cisco AnyConnect Secure Mobility Client ActiveX control.

======================================================================
http://technet.microsoft.com/en-us/security/advisory/2736233
______________________________________________________________________

Microsoft Security Advisory (2736233)
Update Rollup for ActiveX Kill Bits

Published: Tuesday, September 11, 2012

Version: 1.0
General Information
Executive Summary

Microsoft is releasing a new set of ActiveX kill bits with this advisory.

This update sets the kill bits for the following third-party software:

Cisco Secure Desktop. The following Class Identifier relates to a
request by Cisco to set a kill bit for an ActiveX control that is
vulnerable. For more information regarding security issues in the Cisco
Secure Desktop ActiveX control, please see the Cisco Security Advisory,
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client. The
class identifiers (CLSIDs) for this ActiveX control are as listed in the
Third-Party Kill Bits section of this advisory.

Cisco Hostscan. The following Class Identifier relates to a request by
Cisco to set a kill bit for an ActiveX control that is vulnerable. For
more information regarding security issues in the Cisco Hostscan ActiveX
control, please see the Cisco Security Advisory, Multiple
Vulnerabilities in Cisco AnyConnect Secure Mobility Client. The class
identifiers (CLSIDs) for this ActiveX control are as listed in the
Third-Party Kill Bits section of this advisory.

Cisco AnyConnect Secure Mobility Client. The following Class Identifier
relates to a request by Cisco to set a kill bit for an ActiveX control
that is vulnerable. For more information regarding security issues in
the Cisco AnyConnect Secure Mobility Client ActiveX control, please see
the Cisco Security Advisory, Multiple Vulnerabilities in Cisco
AnyConnect Secure Mobility Client. The class identifiers (CLSIDs) for
this ActiveX control are as listed in the Third-Party Kill Bits section
of this advisory.

Related Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1

Third-Party Kill Bits

This update includes kill bits to prevent the following ActiveX controls
from being run in Internet Explorer:

Cisco Secure Desktop. The following Class Identifiers relate to a
request by Cisco to set a kill bit for an ActiveX control that is
vulnerable. For more information regarding security issues in the Cisco
Secure Desktop ActiveX control, please see the Cisco Security Advisory,
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client. The
class identifiers (CLSIDs) for this ActiveX control are:

	{705ec6d4-b138-4079-a307-ef13e4889a82}
	{f8fc1530-0608-11df-2008-0800200c9a66}
	{e34f52fe-7769-46ce-8f8b-5e8abad2e9fc}

Cisco Hostscan. The following Class Identifiers relate to a request by
Cisco to set a kill bit for an ActiveX control that is vulnerable. For
more information regarding security issues in the Cisco Hostscan ActiveX
control, please see the Cisco Security Advisory, Multiple
Vulnerabilities in Cisco AnyConnect Secure Mobility Client. The class
identifiers (CLSIDs) for this ActiveX control are:

        {f8fc1530-0608-11df-2008-0800200c9a66}
        {e34f52fe-7769-46ce-8f8b-5e8abad2e9fc}

Cisco AnyConnect Secure Mobility Client. The following Class Identifiers
relate to a request by Cisco to set a kill bit for an ActiveX control
that is vulnerable. For more information regarding security issues in
the Cisco AnyConnect Secure Mobility Client ActiveX control, please see
the Cisco Security Advisory, Multiple Vulnerabilities in Cisco
AnyConnect Secure Mobility Client. The class identifiers (CLSIDs) for
this ActiveX control are:

        {55963676-2f5e-4baf-ac28-cf26aa587566}
        {cc679cb8-dc4b-458b-b817-d447b3b6ac31}


======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================