Where to Buy Trend Micro Products

For Home

For Small Business

1-888-762-8736
(M-F 8:00am-5:00pm CST)

For Enterprise

1-877-218-7353
(M-F 8:00am-5:00pm CST)

Not in the United States?
Select the country/language of your choice:

Asia Pacific Region

Europe

The Americas

Not in the United States?
Select the country/language of your choice:

Asia/Pacific

Europe

America

Login

For Home

For Business

For Partners

Threat Encyclopedia

December 2012 - Microsoft Releases 7 Security Advisories

SEVERITY

CRITICAL

//  ADVISORY DATE

11 DEC 2012


DESCRIPTION

Microsoft addresses the following vulnerabilities in its December batch of patches:


  • (MS12-077) Cumulative Security Update for Internet Explorer (2761465)
    Risk Rating: Critical

    This patch addresses vulnerabilities in Internet Explorer. When successfully exploited via a specially crafted web page, it could result to remote code execution thus compromising the security of the infected system. Read more here.


  • (MS12-078) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)
    Risk Rating: Critical

    This patch addresses two vulnerabilities in Microsoft Windows that when exploited could result to remote code execution. It can be exploited via a specially crafted document or through a malicious website with embedded TrueType or OpenType font files. Read more here.


  • (MS12-079) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)
    Risk Rating: Critical

    This patch addresses a vulnerability in Microsoft Office that could result in remote code execution when successfully exploited via a specially crafted .RTF file. Read more here.


  • (MS12-080) Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126)
    Risk Rating: Critical

    This patch addresses vulnerabilities in Microsoft Exchange Server, which could allow remote code execution on the transcoding service on the Exchange server via a specially crafted file using Outlook Web App (OWA). Read more here.


  • (MS12-081) Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857)
    Risk Rating: Critical

    This patch addresses a vulnerability in Microsoft Windows, which could be exploited when a users browses a folder/file with a specially crafted filename. Read more here.


  • (MS12-082) Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660)
    Risk Rating: Important

    This patch addresses a vulnerability in Microsoft Windows, which could allow remote code execution thus compromising the security of the infected system. Read more here.


  • (MS12-083) Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809)
    Risk Rating: Important

    This patch addresses a vulnerability in Microsoft Windows, which could bypass the security feature via a revoked certificate to an IP-HTTPS server used in Microsoft DirectAccess deployments. Read more here.


TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS12-077 CVE-2012-4787 1005272 Microsoft Internet Explorer Improper Ref Counting Use After Free Vulnerability 11-Dec-12 YES
MS12-078 CVE-2012-4786 1005275 True Type Font Parsing Vulnerability 11-Dec-12 YES
CVE-2012-2556 1005273 Microsoft Windows OpenType Font Parsing Vulnerability 11-Dec-12 YES
MS12-079 CVE-2012-2539 1005271 Microsoft Word RTF 'listoverridecount' Remote Code Execution Vulnerability 11-Dec-12 YES
MS12-082 CVE-2012-1537 1005274 Microsoft Office DirectPlay Heap Overflow Vulnerability 11-Dec-12 YES
1005276 Microsoft Rich Text File DirectPlay Heap Overflow Vulnerability 11-Dec-12 YES

Connect with us on