December 2012 - Microsoft Releases 7 Security Advisories
Severity: CRITICAL
Advisory Date: DEC 11, 2012
DESCRIPTION
Microsoft addresses the following vulnerabilities in its December batch of patches:
- (MS12-077) Cumulative Security Update for Internet Explorer (2761465)
Risk Rating: Critical
This patch addresses vulnerabilities in Internet Explorer. When successfully exploited via a specially crafted web page, it could result to remote code execution thus compromising the security of the infected system. Read more here. - (MS12-078) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)
Risk Rating: Critical
This patch addresses two vulnerabilities in Microsoft Windows that when exploited could result to remote code execution. It can be exploited via a specially crafted document or through a malicious website with embedded TrueType or OpenType font files. Read more here. - (MS12-079) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)
Risk Rating: Critical
This patch addresses a vulnerability in Microsoft Office that could result in remote code execution when successfully exploited via a specially crafted .RTF file. Read more here. - (MS12-080) Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126)
Risk Rating: Critical
This patch addresses vulnerabilities in Microsoft Exchange Server, which could allow remote code execution on the transcoding service on the Exchange server via a specially crafted file using Outlook Web App (OWA). Read more here. - (MS12-081) Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857)
Risk Rating: Critical
This patch addresses a vulnerability in Microsoft Windows, which could be exploited when a users browses a folder/file with a specially crafted filename. Read more here. - (MS12-082) Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660)
Risk Rating: Important
This patch addresses a vulnerability in Microsoft Windows, which could allow remote code execution thus compromising the security of the infected system. Read more here. - (MS12-083) Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809)
Risk Rating: Important
This patch addresses a vulnerability in Microsoft Windows, which could bypass the security feature via a revoked certificate to an IP-HTTPS server used in Microsoft DirectAccess deployments. Read more here.
TREND MICRO PROTECTION INFORMATION
Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities.
| MS Bulletin ID | Vulnerability ID | DPI Rule Number | DPI Rule Name | Release Date | IDF Compatibility |
| MS12-077 | CVE-2012-4787 | 1005272 | Microsoft Internet Explorer Improper Ref Counting Use After Free Vulnerability | 11-Dec-12 | YES |
| MS12-078 | CVE-2012-4786 | 1005275 | True Type Font Parsing Vulnerability | 11-Dec-12 | YES |
| CVE-2012-2556 | 1005273 | Microsoft Windows OpenType Font Parsing Vulnerability | 11-Dec-12 | YES | |
| MS12-079 | CVE-2012-2539 | 1005271 | Microsoft Word RTF 'listoverridecount' Remote Code Execution Vulnerability | 11-Dec-12 | YES |
| MS12-082 | CVE-2012-1537 | 1005274 | Microsoft Office DirectPlay Heap Overflow Vulnerability | 11-Dec-12 | YES |
| 1005276 | Microsoft Rich Text File DirectPlay Heap Overflow Vulnerability | 11-Dec-12 | YES |