====================================================================

                                    CERT-Renater

                         Note d'Information No. 2016/VULN098
_____________________________________________________________________

DATE                : 09/03/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Internet Explorer versions 9, 10,
                                               11.

======================================================================
KB3142015
https://technet.microsoft.com/en-us/library/security/MS16-023
_____________________________________________________________________

MS16-023: Cumulative Security Update for Internet Explorer (3142015)

Bulletin Number: MS16-023

Bulletin Title: Cumulative Security Update for Internet Explorer

Severity: Critical

KB Article: 3142015

Version: 1.0

Published Date: March 8, 2016

Executive Summary

This security update resolves vulnerabilities in Internet Explorer. The
most severe of the vulnerabilities could allow remote code execution if
a user views a specially crafted webpage using Internet Explorer. An
attacker who successfully exploited this vulnerability could gain the
same user rights as the current user. If the current user is logged on
with administrative user rights, an attacker who successfully exploited
this vulnerability could take control of an affected system. An
attacker could then install programs; view, change, or delete data; or
create new accounts with full user rights.

This security update is rated Critical for Internet Explorer 9 (IE 9),
and Internet Explorer 11 (IE 11) on affected Windows clients, and
Moderate for Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10),
and Internet Explorer 11 (IE 11) on affected Windows servers.

Affected Software

Internet Explorer 9

     Windows Vista Service Pack 2

     Windows Vista x64 Edition Service Pack 2

     Windows Server 2008 for 32-bit Systems Service Pack 2

     Windows Server 2008 for x64-based Systems Service Pack 2

Internet Explorer 10

     Windows Server 2012

Internet Explorer 11

     Windows 7 for 32-bit Systems Service Pack 1

     Windows 7 for x64-based Systems Service Pack 1

     Windows 8.1 for 32-bit Systems

     Windows 8.1 for x64-based Systems

     Windows Server 2008 R2 for x64-based Systems Service Pack 1

     Windows Server 2012 R2

     Windows RT 8.1

     Windows 10 for 32-bit Systems* (3140745)

     Windows 10 for x64-based Systems* (3140745)

     Windows 10 Version 1511 for 32-bit Systems* (3140768)

     Windows 10 Version 1511 for x64-based Systems* (3140768)

* Windows 10 updates are cumulative. In addition to containing
non-security updates, they also contain all of the security fixes for
all of the Windows 10-affected vulnerabilities shipping with the
monthly security release. The updates are available via the Microsoft
Update Catalog.

Vulnerability Information

Multiple Internet Explorer Memory Corruption Vulnerabilities

Multiple remote code execution vulnerabilities exist when Internet
Explorer improperly accesses objects in memory. These vulnerabilities
could corrupt memory in such a way that an attacker could execute
arbitrary code in the context of the current user.

An attacker could host a specially crafted website that is designed to
exploit these vulnerabilities through Internet Explorer, and then
convince a user to view the website. The attacker could also take
advantage of compromised websites and websites that accept or host
user-provided content or advertisements by adding specially crafted
content that could exploit the vulnerabilities. In all cases, however,
an attacker would have no way to force users to view the attacker-
controlled content. Instead, an attacker would have to convince users
to take action, typically by way of enticement in an email or Instant
Messenger message, or by getting them to open an attachment sent
through email.

An attacker who successfully exploited these vulnerabilities could gain
the same user rights as the current user. If the current user is logged
on with administrative user rights, an attacker who successfully
exploited these vulnerabilities could take control of an affected
system. An attacker could then install programs; view, change, or
delete data; or create new accounts with full user rights. The update
addresses the vulnerabilities by modifying how Internet Explorer
handles objects in memory.

The following table contains links to the standard entry for each
vulnerability in the Common Vulnerabilities and Exposures list:

Vulnerability title    CVE number    Publicly disclosed   Exploited

Microsoft Browser Memory
Corruption Vulnerability 	CVE-2016-0102	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0103	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0104	No 	No

Microsoft Browser Memory
Corruption Vulnerability 	CVE-2016-0105	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0106	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0107	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0108	No 	No

Microsoft Browser Memory
Corruption Vulnerability 	CVE-2016-0109	No 	No

Microsoft Browser Memory
Corruption Vulnerability 	CVE-2016-0110	No 	No

Microsoft Browser Memory
Corruption Vulnerability 	CVE-2016-0111	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0112	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0113	No 	No

Internet Explorer Memory
Corruption Vulnerability 	CVE-2016-0114	No 	No


==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================