=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN540
_____________________________________________________________________

DATE                : 11/12/2013

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version XP, Server 2003, Vista,
                         Server 2008, 7, 8, RT, Server 2012.

======================================================================
https://technet.microsoft.com/en-us/security/bulletin/ms13-098
______________________________________________________________________

Microsoft Security Bulletin MS13-098 - Critical Vulnerability in Windows
Could Allow Remote Code Execution (2893294)

Published Date: December 10, 2013

Version: 1.0

General Information

Executive Summary

This security update resolves a privately reported vulnerability in
Microsoft Windows. The vulnerability could allow remote code execution
if user or application runs or installs a specially crafted, signed
portable executable (PE) file on an affected system.

This security update is rated Critical for all supported releases of
Windows.

For more information, see the subsection, Affected and Non-Affected
Software, in this section.

Affected Software

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT[1]
Windows RT 8.1[1]
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
  installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
  installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2 (Server Core installation)


Vulnerability Information

WinVerifyTrust Signature Validation Vulnerability - CVE-2013-3900

A remote code execution vulnerability exists in the way that the
WinVerifyTrust function handles Windows Authenticode signature
verification for portable executable (PE) files. An anonymous attacker
could exploit the vulnerability by modifying an existing signed
executable file to leverage unverified portions of the file in such a
way as to add malicious code to the file without invalidating the
signature. An attacker who successfully exploited this vulnerability
could take complete control of an affected system. An attacker could
then install programs; view, change, or delete data;
or create new accounts with full user rights.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================