====================================================================

                             CERT-Renater

                  Note d'Information No. 2016/VULN110
_____________________________________________________________________

DATE                : 10/03/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version Vista, Server 2008, 7, 8.1,
                      RT 8.1, 10, Server 2012 running Windows OLE.

======================================================================
KB3143136
https://technet.microsoft.com/en-us/library/security/MS16-030
_____________________________________________________________________

Microsoft Security Bulletin MS16-030: Security Update for Windows OLE
to Address Remote Code Execution (3143136)

Bulletin Number: MS16-030

Bulletin Title: Security Update for Windows OLE to Address Remote Code
Execution

Severity: Important

KB Article: 3143136

Version: 1.0

Published Date: March 8, 2016


Executive Summary

This security update resolves vulnerabilities in Microsoft Windows. The
vulnerabilities could allow remote code execution if Windows OLE fails
to properly validate user input. An attacker could exploit the
vulnerabilities to execute malicious code. However, an attacker must
first convince a user to open either a specially crafted file or a
program from either a webpage or an email message.

This security update is rated Important for all supported editions of
Windows.


Affected Software

Windows Vista Service Pack 2 (3139940)

Windows Vista x64 Edition Service Pack 2 (3139940)

Windows Server 2008 for 32-bit Systems Service Pack 2 (3139940)

Windows Server 2008 for x64-based Systems Service Pack 2 (3139940)

Windows Server 2008 for Itanium-based Systems Service Pack 2 (3139940)

Windows 7 for 32-bit Systems Service Pack 1 (3139940)

Windows 7 for x64-based Systems Service Pack 1 (3139940)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (3139940)

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (3139940)

Windows 8.1 for 32-bit Systems (3139940)

Windows 8.1 for x64-based Systems (3139940)

Windows Server 2012 (3139940)

Windows Server 2012 R2 (3139940)

Windows RT 8.1[1] (3139940)

Windows 10 for 32-bit Systems[2] (3140745)

Windows 10 for x64-based Systems[2] (3140745)

Windows 10 Version 1511 for 32-bit Systems[2] (3140768)

Windows 10 Version 1511 for x64-based Systems [2] (3140768)

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
installation) (3139940)

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
installation) (3139940)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core 
installation) (3139940)

Windows Server 2012 (Server Core installation) (3139940)

Windows Server 2012 R2 (Server Core installation) (3139940)


Vulnerability Information

Multiple Windows OLE Memory Remote Code Execution Vulnerabilities

Multiple remote code execution vulnerabilities exist when Microsoft
Windows OLE fails to properly validate user input. An attacker could
use the vulnerabilities to execute malicious code.

To exploit the vulnerabilities, an attacker would have to convince a
user to open either a specially crafted file or a program from either a
webpage or an email message. The update addresses the vulnerabilities
by correcting how Windows OLE validates user input.

The following table contains links to the standard entry for each
vulnerability in the Common Vulnerabilities and Exposures list:

Vulnerability title   CVE number   Publicly disclosed   Exploited

Windows OLE Memory Remote
Code Execution Vulnerability    CVE-2016-0091	No 	No

Windows OLE Memory Remote
Code Execution Vulnerability    CVE-2016-0092	No 	No


==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================