====================================================================

                              CERT-Renater

                  Note d'Information No. 2016/VULN195
_____________________________________________________________________

DATE                : 11/05/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version Vista, 7, 8.1, RT 8.1, 10
                        running Windows Journal.

======================================================================
KB3156761
https://technet.microsoft.com/en-us/library/security/MS16-056
____________________________________________________________________

MS16-056: Security Update for Windows Journal (3156761)

Document Metadata

Bulletin Number: MS16-056

Bulletin Title: Security Update for Windows Journal

Severity: Critical

KB Article: 3156761

Version: 1.0

Published Date: May 10, 2016


Executive Summary

This security update resolves a vulnerability in Microsoft Windows. The
vulnerability could allow remote code execution if a user opens a
specially crafted Journal file. Users whose accounts are configured to
have fewer user rights on the system could be less impacted than users
who operate with administrative user rights.
This security update is rated Critical for all supported editions of
Windows Vista, Windows 7, Windows 8.1, Windows RT 8.1, and Windows 10.


Affected Software

Windows Vista
Windows 7
Windows 8.1
Windows RT 8.1
Windows 10


Vulnerability Information

Windows Journal Memory Corruption Vulnerability- CVE-2016-0182

A remote code execution vulnerability exists in Microsoft Windows when a
specially crafted Journal file is opened in Windows Journal. An attacker
who successfully exploited this vulnerability could cause arbitrary code
to execute in the context of the current user. If a user is logged on
with administrative user rights, an attacker could take control of the
affected system. An attacker could then install programs; view, change,
or delete data, or create new accounts with full user rights. Users
whose accounts are configured to have fewer user rights on the system
could be less impacted than users who operate with administrative user
rights.

For an attack to be successful, this vulnerability requires that a user
open a specially crafted Journal file with an affected version of
Windows Journal. In an email attack scenario, an attacker could exploit
the vulnerability by sending a specially crafted Journal file to the
user, and then convincing the user to open the file. The update
addresses the vulnerability by modifying how Windows Journal parses
Journal files.

The following table contains links to the standard entry for each
vulnerability in the Common Vulnerabilities and Exposures list:

Vulnerability Title   CVE number   Publicly disclosed	Exploited

Windows Journal Memory
Corruption Vulnerability	CVE-2016-0182	No	No

==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================