=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN003
_____________________________________________________________________

DATE                : 09/01/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Windows 7, Windows Server 2008
                          running Windows Print Spooler Components.

======================================================================
KB2769369
http://technet.microsoft.com/en-us/security/bulletin/ms13-001
______________________________________________________________________


Microsoft Security Bulletin MS13-001 - Critical Vulnerability in Windows
Print Spooler Components Could Allow Remote Code Execution (2769369)

Published Date: January 8, 2013

Version: 1.0


General Information

Executive Summary

This security update resolves one privately reported vulnerability in
Microsoft Windows. The vulnerability could allow remote code execution
if a print server received a specially crafted print job. Firewall best
practices and standard default firewall configurations can help protect
networks from attacks that originate outside the enterprise perimeter.
Best practices recommend that systems connected directly to the
Internet have a minimal number of ports exposed.

This security update is rated Critical for all supported editions of
Windows 7 and Windows Server 2008 R2.

The security update addresses the vulnerability by correcting how the
Windows Print Spooler handles specially crafted print jobs.


Affected Software

Windows 7 for 32-bit Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)

Vulnerability Information

Windows Print Spooler Components Vulnerability - CVE-2013-0011

A remote code execution vulnerability exists in the way that Microsoft
Windows Print Spooler handles specially crafted print jobs. The
vulnerability may corrupt memory in such a way that an attacker could
execute arbitrary code.


======================================================================

                 =========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
=========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44          +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
+ 75013 Paris           | email: certsvp@renater.fr     +
=========================================================