====================================================================

                             CERT-Renater

                  Note d'Information No. 2012/VULN485
____________________________________________________________________

DATE                : 12/12/2012

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Windows version XP, Vista, 7, 8, Server 2003,
                       Server 2008, Server 2012.

======================================================================
KB2770660
http://technet.microsoft.com/en-us/security/bulletin/ms12-082
______________________________________________________________________


Microsoft Security Bulletin MS12-082 - Important Vulnerability in
DirectPlay Could Allow Remote Code Execution (2770660)

Published Date: December 11, 2012

Version: 1.0


General Information

Executive Summary

This security update resolves a privately reported vulnerability in
Microsoft Windows. The vulnerability could allow remote code execution
if an attacker convinces a user to view a specially crafted Office
document with embedded content. An attacker who successfully exploits
this vulnerability could gain the same user rights as the current user.
Users whose accounts are configured to have fewer user rights on the
system could be less impacted than users who operate with
administrative user rights.

This security update is rated Important for all supported releases of
Microsoft Windows except Windows RT.


Affected Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for 64-bit Systems
Windows Server 2012


Vulnerability Information

DirectPlay Heap Overflow Vulnerability - CVE-2012-1537

A remote code execution vulnerability exists in the way that DirectPlay
handles specially crafted content. The vulnerability could allow remote
code execution if an attacker convinces a user to view a specially
crafted Office document with embedded content. An attacker who
successfully exploited this vulnerability could take complete control
of an affected system. An attacker could then install programs; view,
change, or delete data; or create new accounts with full user rights.
Users whose accounts are configured to have fewer user rights on the
system could be less impacted than users who operate with
administrative user rights.

======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================