====================================================================

                                    CERT-Renater

                        Note d'Information No. 2016/VULN327
_____________________________________________________________________

DATE                : 14/09/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows versions Vista, Server 2008, 7, 8.1,
                       Server 2012,RT 8.1, 10
                running OLE Automation for VBScript Scripting Engine.

=====================================================================
KB3188724
https://technet.microsoft.com/en-us/library/security/MS16-116
____________________________________________________________________

Microsoft Security Bulletin MS16-116: Critical Security Update in OLE
Automation for VBScript Scripting Engine (3188724)

Executive Summary

This security update resolves a vulnerability in Microsoft Windows. The
vulnerability could allow remote code execution if an attacker
successfully convinces a user of an affected system to visit a
malicious or compromised website. Note that you must install two
updates to be protected from the vulnerability discussed in this
bulletin: The update in this bulletin, MS16-116, and the update in
MS16-104.

The security update affects all supported releases of Microsoft Windows
and is rated Critical on client operating systems and Moderate on
servers.


Affected Software

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

Windows 8.1

Windows Server 2012

Windows Server 2012 R2

Windows RT 8.1

Windows 10

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
installation)

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core 
installation)

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2 (Server Core installation)


Vulnerability Information

Scripting Engine Memory Corruption Vulnerability - CVE-2016-3375

A remote code execution vulnerability exists in the way that the
Microsoft OLE Automation mechanism and the VBScript Scripting Engine
in Internet Explorer access objects in memory. The vulnerability could
corrupt memory in a way that could allow an attacker to execute
arbitrary code in the context of the current user. An attacker who
successfully exploited the vulnerability could gain the same user
rights as the current user. If the current user is logged on with
administrative user rights, the attacker could take control of an
affected system. An attacker could then install programs; view, change,
or delete data; or create new accounts with full user rights.

An attacker could host a specially crafted website that is designed to
exploit the vulnerability through Internet Explorer, and then convince
a user to view the website. The attacker could also take advantage of
compromised websites, or websites that accept or host user-provided
content or advertisements, by adding specially crafted content that
could exploit the vulnerability. In all cases, however, an attacker
would have no way to force users to view the attacker-controlled
content. Instead, an attacker would have to convince users
to take action, typically via an enticement in email or instant
message, or by getting them to open an email attachment.

The update, in conjunction with the Internet Explorer update in
MS16-104, addresses the vulnerability by modifying how the Microsoft
OLE Automation mechanism and the VBScript Scripting Engine in Internet
Explorer handle objects in memory.

The following table contains links to the standard entry for each
vulnerability in the Common Vulnerabilities and Exposures list:

Vulnerability title   CVE number   Publicly disclosed 	Exploited

Scripting Engine Memory
Corruption Vulnerability    CVE-2016-3375 	No 	No

==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================