=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN234
_____________________________________________________________________

DATE                : 12/06/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S) : Systems running
             Windows version Vista, Server 2008, 7, Server 2008 R2,
                             8, Server 2012, RT.

======================================================================
KB2839894
http://technet.microsoft.com/en-us/security/bulletin/ms13-050
______________________________________________________________________

Microsoft Security Bulletin MS13-050 - Important Vulnerability in
Windows Print Spooler Components Could Allow Elevation of Privilege
(2839894)

Published Date: June 11, 2013

Version: 1.0


General Information

Executive Summary

This security update resolves a privately reported vulnerability in
Microsoft Windows. The vulnerability could allow elevation of privilege
when an authenticated attacker deletes a printer connection. An
attacker must have valid logon credentials and be able to log on to
exploit this vulnerability.

This security update is rated Important for all supported editions of
Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2,
Windows 8, Windows Server 2012, and Windows RT.


Affected Software

Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for 64-bit Systems
Windows Server 2012
Windows RT

Vulnerability Information

Print Spooler Vulnerability - CVE-2013-1339

An elevation of privilege vulnerability exists in the way that Microsoft
Windows Print Spooler handles memory when a printer is deleted.


======================================================================

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================