=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN501
_____________________________________________________________________

DATE                : 13/11/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S):  Windows version XP, Server 2003, Vista,
                              Server 2008, 7, 8, Server 2012.

======================================================================
KB2875783
https://technet.microsoft.com/en-us/security/bulletin/ms13-093
______________________________________________________________________

Microsoft Security Bulletin MS13-093 - Important Vulnerability in
Windows Ancillary Function Driver Could Allow Information Disclosure
(2875783)

Published: Tuesday, November 12, 2013

Version: 1.0


General Information


Executive Summary

This security update resolves a privately reported vulnerability in
Microsoft Windows. The vulnerability could allow information disclosure
if an attacker logs on to an affected system as a local user, and runs
a specially crafted application on the system that is designed to
enable the attacker to obtain information from a higher-privileged
account. An attacker must have valid logon credentials and be able to
log on locally to exploit this vulnerability.

This security update is rated Important for all supported 64-bit
editions of Windows XP, Windows Server 2003, Windows Vista, Windows
Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows
Server 2012.

The security update addresses the vulnerability by correcting how
Windows copies data from kernel memory to user memory.


Affected Software

Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for x64-based Systems
Windows Server 2012
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
  installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)
Windows Server 2012 (Server Core installation)


Ancillary Function Driver Information Disclosure Vulnerability -
CVE-2013-3887

An information disclosure vulnerability exists when the Windows
kernel-mode driver improperly handles copying data between kernel and
user memory.

To view this vulnerability as a standard entry in the Common
Vulnerabilities and Exposures list, see CVE-2013-3887.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================