====================================================================

                             CERT-Renater

                  Note d'Information No. 2012/VULN484
____________________________________________________________________

DATE                : 12/12/2012

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Windows version XP, Vista, 7, Server 2003,
                       Server 2008.

======================================================================
KB2758857
http://technet.microsoft.com/en-us/security/bulletin/ms12-081
______________________________________________________________________


Microsoft Security Bulletin MS12-081 - Critical Vulnerability in Windows
File Handling Component Could Allow Remote Code Execution (2758857)

Published Date: December 11, 2012

Version: 1.0


General Information

Executive Summary

This security update resolves a privately reported vulnerability in
Microsoft Windows. The vulnerability could allow remote code execution
if a user browses to a folder that contains a file or subfolder with a
specially crafted name. An attacker who successfully exploited this
vulnerability could gain the same user rights as the current user.
Users whose accounts are configured to have fewer user rights on the
system could be less impacted than users who operate with
administrative user rights.

This security update is rated Critical for all supported editions of
Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008,
Windows 7, and Windows Server 2008 R2. Windows 8, Windows Server 2012,
and Window RT are not affected by the vulnerability.


Affected Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
installation)
Windows Server 2008 R2 for x64-based Systems (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)


Vulnerability Information

Windows Filename Parsing Vulnerability - CVE-2012-4774

A remote code execution vulnerability exists in the way that Microsoft
Windows parses filenames. The vulnerability may corrupt memory in such
a way that an attacker could execute arbitrary code in the context of
the current user.


======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================