=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN444
_____________________________________________________________________

DATE                : 09/10/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S):  Systems running Internet Explorer version 6, 7,
                                   8, 9, 10, 11.

======================================================================
KB2879017
https://technet.microsoft.com/en-us/security/bulletin/ms13-080
______________________________________________________________________

Microsoft Security Bulletin MS13-080 - Critical Cumulative Security
Update for Internet Explorer (2879017)

Published: Tuesday, October 08, 2013

Version: 1.2

General Information


Executive Summary

This security update resolves one publicly disclosed vulnerability and
nine privately reported vulnerabilities in Internet Explorer. The most
severe vulnerabilities could allow remote code execution if a user
views a specially crafted webpage using Internet Explorer. An attacker
who successfully exploited the most severe of these vulnerabilities
could gain the same user rights as the current user. Users whose
accounts are configured to have fewer user rights on the system could
be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 6,
Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet
Explorer 10, and Internet Explorer 11 on Windows clients and Moderate
for Internet Explorer 6, Internet Explorer 7, Internet Explorer 8,
Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 on
Windows servers.


Affected Software

Internet Explorer 6
Internet Explorer 7
Internet Explorer 8
Internet Explorer 9
Internet Explorer 10
Internet Explorer 11

Vulnerability Information

Multiple Memory Corruption Vulnerabilities in Internet Explorer -
CVE-2013-3871, CVE-2013-3872, CVE-2013-3873, CVE-2013-3874, CVE-2013-3875,
CVE-2013-3882, CVE-2013-3885, CVE-2013-3886, CVE-2013-3893, CVE-2013-3897

Remote code execution vulnerabilities exist when Internet Explorer
improperly accesses an object in memory. These vulnerabilities could
corrupt memory in such a way that an attacker could execute arbitrary
code in the context of the current user.


=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================