=====================================================================

                           CERT-Renater

               Note d'Information No. 2014/VULN264
_____________________________________________________________________

DATE                : 12/11/2014

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version Server 2003, Vista, Server 2008,
    Server 2012, 7, 8, 8.1, RT, RT 8.1, Server Core installation option,
                      running Windows Kernel-Mode Driver.

======================================================================
KB3002885
https://technet.microsoft.com/library/security/ms14-079
______________________________________________________________________

Microsoft Security Bulletin MS14-079 - Moderate Vulnerability in
Kernel-Mode Driver Could Allow Denial of Service (3002885)

Version: 1.0

Published Date: November 11, 2014


General Information

Executive Summary

This security update resolves a privately reported vulnerability in
Microsoft Windows. The vulnerability could allow denial of service if
an attacker places a specially crafted TrueType font on a network share
and a user subsequently navigates there in Windows Explorer. In a
web-based attack scenario, an attacker could host a website that
contains a webpage that is used to exploit this vulnerability. In
addition, compromised websites and websites that accept or host
user-provided content or advertisements could contain specially
crafted content that could exploit this vulnerability. In all cases,
however, an attacker would have no way to force users to visit such
websites. Instead, an attacker would have to persuade users to visit a
website, typically by getting them to click a link in an email message
or Instant Messenger message that takes them to the attacker's website.

This security update is rated Moderate for all supported releases of
Microsoft Windows.


Affected Software

Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1


Vulnerability Information

Denial of Service in Windows Kernel Mode Driver Vulnerability -
CVE-2014-6317

A denial of service vulnerability exists in the Windows kernel-mode
driver that is caused by the improper handling of TrueType font objects
in memory.
Microsoft had not received any information to indicate that this
vulnerability had been publicly used to attack customers when this
security bulletin was originally issued. When this security bulletin
was issued, Microsoft had not received any information to indicate that
this vulnerability had been publicly used to attack customers.


=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================