=====================================================================

                           CERT-Renater

               Note d'Information No. 2014/VULN160
_____________________________________________________________________

DATE                : 12/08/2014

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S):  Windows running Kernel-Mode Drivers.

======================================================================
KB2984615
https://technet.microsoft.com/library/security/ms14-045
______________________________________________________________________

Microsoft Security Bulletin MS14-045 - Important Vulnerabilities in
Kernel-Mode Drivers Could Allow Elevation of Privilege
(2984615)

Published: August 12, 2014

Version: 1.0

General Information

Executive Summary

This security update resolves three privately reported vulnerabilities
in Microsoft Windows. The most severe of these vulnerabilities could
allow elevation of privilege if an attacker logs on to the system and
runs a specially crafted application. An attacker must have valid logon
credentials and be able to log on locally to exploit these
vulnerabilities.

This security update is rated Important for all supported editions of
Microsoft Windows


Affected Software

Windows Server 2003

Windows Vista

Windows Server 2008

Windows 7

Windows 8 & 8.1

Windows Server 2012 and Windows Server 2012 R2

Windows RT and Windows RT 8.1


Vulnerability Information

Win32k Elevation of Privilege Vulnerability - CVE-2014-0318

An elevation of privilege vulnerability exists when the Windows
kernel-mode driver improperly handles window handle thread-owned
objects. An attacker who successfully exploited this vulnerability
could run arbitrary code in kernel mode. An attacker could then install
programs; view, change, or delete data; or create new accounts with
full administrative rights.

To view this vulnerability as a standard entry in the Common
Vulnerabilities and Exposures list, see CVE-2014-0318.

Font Double-Fetch Vulnerability - CVE-2014-1819

An elevation of privilege vulnerability exists in the way that the
affected component handles objects from specially crafted font files.
An attacker who successfully exploited this vulnerability could execute
arbitrary code with elevated privileges.

To view this vulnerability as a standard entry in the Common
Vulnerabilities and Exposures list, see CVE-2014-1819.

Windows Kernel Pool Allocation Vulnerability - CVE-2014-4064

An information disclosure vulnerability exists in the way Windows
kernel memory is managed. An attacker who successfully exploited this
vulnerability could use it to disclose memory addresses or other
sensitive kernel information.

To view this vulnerability as a standard entry in the Common
Vulnerabilities and Exposures list, see CVE-2014-4064.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================