====================================================================

                             CERT-Renater

                  Note d'Information No. 2012/VULN461
____________________________________________________________________

DATE                :  14/11/2012

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Windows version 7, 8, RT, XP, Vista, Server 2003,
                Server 2008, Server 2012 running Kernel-Mode Drivers.

======================================================================
KB2761226
http://technet.microsoft.com/en-us/security/bulletin/ms12-075
______________________________________________________________________

Microsoft Security Bulletin MS12-075 - Critical Vulnerabilities in
Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2761226)

Published Date: November 13, 2012

Version: 1.0

General Information


Executive Summary

This security update resolves three privately reported vulnerabilities
in Microsoft Windows. The most severe of these vulnerabilities could
allow remote code execution if a user opens a specially crafted document
or visits a malicious webpage that embeds TrueType font files. An
attacker would have to convince users to visit the website, typically by
getting them to click a link in an email message that takes them to the
attacker's website.

This security update is rated Critical for all supported releases of
Microsoft Windows.


Affected Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for 64-bit Systems
Windows Server 2012
Windows RT


Vulnerability Information

Win32k Use After Free Vulnerability - CVE-2012-2530

An elevation of privilege vulnerability exists when the Windows
kernel-mode driver improperly handles objects in memory. An attacker who
successfully exploited this vulnerability could run arbitrary code in
kernel mode. An attacker could then install programs; view, change, or
delete data; or create new accounts with full administrative rights.

Win32k Use After Free Vulnerability - CVE-2012-2553

An elevation of privilege vulnerability exists when the Windows
kernel-mode driver improperly handles objects in memory. An attacker who
successfully exploited this vulnerability could run arbitrary code in
kernel mode. An attacker could then install programs; view, change, or
delete data; or create new accounts with full administrative rights.

TrueType Font Parsing Vulnerability - CVE-2012-2897

A remote code execution vulnerability exists in the way that affected
components handle a specially crafted TrueType font file. The
vulnerability could allow remote code execution if a user opens a
specially crafted TrueType font file. An attacker who successfully
exploited this vulnerability could take complete control of an affected
system. An attacker could then install programs; view, change, or delete
data; or create new accounts with full administrative rights.


=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================