====================================================================

                           CERT-Renater

               Note d'Information No. 2015/VULN151
_____________________________________________________________________

DATE                : 15/07/2015

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version Server 2003, Vista, Server 2008, 7,
       8, 8.1, Server 2012, RT, RT 8.1 running Windows graphics component.

======================================================================
KB3069392
https://technet.microsoft.com/en-us/library/security/MS15-072
______________________________________________________________________

Microsoft Security Bulletin MS15-072: Vulnerability in Windows Graphics
Component Could Allow Elevation of Privilege (3069392)

Bulletin Number: MS15-072

Bulletin Title: Vulnerability in Windows Graphics Component Could Allow
Elevation of Privilege

Severity: Important

KB Article: 3069392

Version: 1.0

Published Date: July 14, 2015

Executive Summary

This security update resolves a vulnerability in Microsoft Windows. The
vulnerability could allow elevation of privilege if the Windows graphics
component fails to properly process bitmap conversions. An authenticated
attacker who successfully exploited this vulnerability could elevate
privileges on a targeted system. An attacker could then install
programs; view, change, or delete data; or create new accounts with full
administrative rights. An attacker must first log on to the system to
exploit this vulnerability.

This security update is rated Important for all supported releases of
Windows.
For more information, see the Affected Software section.


Affected Software

The following software versions or editions are affected. Versions or
editions that are not listed are either past their support life cycle or
are not affected. To determine the support life cycle for your software
version or edition, see Microsoft Support Lifecycle.

Windows Server 2003

Windows Server 2003 Service Pack 2

Windows Server 2003 x64 Edition Service Pack 2

Windows Server 2003 with SP2 for Itanium-based Systems

Windows Server 2003 R2 Service Pack 2

Windows Server 2003 R2 x64 Edition Service Pack 2

Windows Vista

Windows Vista Service Pack 2

Windows Vista x64 Edition Service Pack 2

Windows Server 2008

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for Itanium-based Systems Service Pack 2

Windows 7

Windows 7 for 32-bit Systems Service Pack 1

Windows 7 for x64-based Systems Service Pack 1

Windows Server 2008 R2

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1

Windows 8 and Windows 8.1

Windows 8 for 32-bit Systems

Windows 8 for x64-based Systems

Windows 8.1 for 32-bit Systems

Windows 8.1 for x64-based Systems

Windows Server 2012 and Windows Server 2012 R2

Windows Server 2012

Windows Server 2012 R2

Windows RT and Windows RT 8.1

Windows RT[1]

Windows RT 8.1[1]

Server Core installation option

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
installation)

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2 (Server Core installation)


Vulnerability Information

Graphics Component EOP Vulnerability - CVE-2015-2364

An elevation of privilege vulnerability exists in the Windows graphics
component when it fails to properly process bitmap conversions. An
authenticated attacker who successfully exploited this vulnerability
could elevate privileges on a targeted system. An attacker could then
install programs; view, change, or delete data; or create new accounts
with full administrative rights.

To exploit the vulnerability, an attacker must first log on to the
system. An attacker could then run a specially crafted application that
is designed to increase privileges. The update addresses the
vulnerability by correcting how Windows processes bitmap conversions.

Microsoft received information about this vulnerability through
coordinated vulnerability disclosure. When this security bulletin was
originally issued Microsoft had not received any information to indicate
that this vulnerability had been publicly used to attack customers.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================