Gravité: : Élevé
  Date du conseil: 12 juillet 2011

  Description

Microsoft addresses the following vulnerabilities in its July batch of patches:

  • (MS11-053) Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220)
    Risk Rating: Critical

    This security update fixes a reported vulnerability in Windows Bluetooth Stack, which may lead to arbitrary code execution. To exploit this bug, a remote user may send specifically crafted Bluetooth packets to a system. Read more here.

  • (MS11-054) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917)
    Risk Rating: Important

    This security update fixes 15 privately reported vulnerabilities in Microsoft Window, the most severe of which may lead to elevation of of privilege if an attacker logged on locally and executes a malicious application. However, remote user must be logged-on locally to do a successful exploit. Read more here.

  • (MS11-055) Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2560847)
    Risk Rating: Important

    This security update resolves a publicly disclosed vulnerability in Microsoft Visio, which may lead to remote arbitrary code execution if a user opens a legitimate Visio file located in the same network directory as a malicious library file. As a result, attacker may gain same user rights as the logged-on user. Read more here.

  • (MS11-056) Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)
    Risk Rating: Important

    This bulletin resolves five privately reported vulnerabilities in the Microsoft Windows Client/Server Run-time Subsystem (CSRSS), which may result to elevation of privilege if remote user logs on to a system and runs a malicious application. Read more here.

  Information Exposure Rating:

Trend Micro Deep Security shields the following vulnerabilities using the specified rules. Trend Micro customers using OfficeScan with the Intrusion Defense Firewall plugin are also protected from attacks using these vulnerabilities.
Microsoft Bulletin ID Vulnerability ID Identifier & Title Deep Security Pattern Version Deep Security Pattern Release Date
MS11-055 CVE-2010-3148 1004730 - Microsoft Visio Insecure Library Loading Vulnerability Over Network Share 11-021 Jul 13, 2011
CVE-2010-3148 1004729 - Microsoft Visio Insecure Library Loading Vulnerability Over WebDAV 11-021 Jul 13, 2011

  OtherInformation