Gravité: : Critique
  Date du conseil: 10 juillet 2013

  Description

Microsoft addresses the following vulnerabilities in its July batch of patches:

  • (MS13-052) Vulnerabilities in .NET Framework and Silverlight Could Allow Remote Code Execution (2861561)
    Risk Rating: Critical

    This security update addresses seven vulnerabilities in Microsotf .NET Framework and Silverlight. Successful exploitation may allow a remote attacker to execute a malware onto vulnerable systems. Read more here.

  • (MS13-053) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2850851)
    Risk Rating: Critical

    This update resolves two publicly revealed and six privately reported vulnerabilities in Windows, which may allow a remote attacker to execute malware onto outdated systems. To do so, a user must view a maliciously-crafted shared content embedded with TrueType font files. Read more here.

  • (MS13-054) Vulnerability in GDI Could Allow Remote Code Execution (2848295)
    Risk Rating: Critical

    This security update addresses a vulnerability in Microsoft Windows, Office, Lync and Visual Studio, which may lead to malware infection of vulnerable systems. Read more here.

  • (MS13-055) Cumulative Security Update for Internet Explorer (2846071)
    Risk Rating: Critical

    This security update addresses seventeen undisclosed vulnerabilities in Internet Explorer, the most severe of which may lead to malware infection. To do so, a users may need to view maliciously-crafted webpage using Internet Explorer browser. Once done, the malicious user may gain same user rights as the current user. Read more here.

  • (MS13-056) Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2845187)
    Risk Rating: Critical

    This security update addresses a privately reported vulnerability in Windows, which could allow malware execution one user opens a malicious image file. Read more here.

  • (MS13-057) Vulnerability in Windows Media Format Runtime Could Allow Remote Code Execution (2847883)
    Risk Rating: Critical

    This security update addresses an undisclosed vulnerability in Windows, which could lead to malware execution once a user opens specific media file. Read more here.

  • (MS13-058) Vulnerability in Windows Defender Could Allow Elevation of Privilege (2847927)
    Risk Rating: Important

    This security update addresses a privately reported vulnerability in Windows Defender for Windows 7 and Windows Server 2008 R2. It may allow a malicious user to gain elevated privileges, however, the attacker must have valid logon credentials to exploit this flaw. Read more here.

  Information Exposure Rating:

Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS13-055 CVE-2013-3143 1005580 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3143) 9-Jul-13 YES
MS13-055 CVE-2013-3143 1005584 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3143) 09-Jul-13 YES
MS13-055 CVE-2013-3144 1005582 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3144) 09-Jul-13 YES
MS13-055 CVE-2013-3145 1005589 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3145) 09-Jul-13 YES
MS13-055 CVE-2013-3146 1005585 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3146) 09-Jul-13 YES
MS13-055 CVE-2013-3147 1005581 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3147) 09-Jul-13 YES
MS13-055 CVE-2013-3148 1005583 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3148) 09-Jul-13 YES
MS13-055 CVE-2013-3150 1005586 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3150) 09-Jul-13 YES
MS13-055 CVE-2013-3152 1005588 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3152) 09-Jul-13 YES
MS13-055 CVE-2013-3153 1005590 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3153) 09-Jul-13 YES
MS13-055 CVE-2013-3163 1005591 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3163) 09-Jul-13 YES
MS13-055 CVE-2013-3164 1005587 Internet Explorer Memory Corruption Vulnerability (CVE-2013-3164) 09-Jul-13 YES