June 2020 - Microsoft Releases Security Patches

Publish date: June 11, 2020
  Advisory Date: JUN 10, 2020

  DESCRIPTION

Microsoft addresses several vulnerabilities in its June security bulletin. Trend Micro Deep Security covers the following:

  • CVE-2020-1213 - VBScript Remote Code Execution Vulnerability
    Risk Rating: Critical

    This remote code execution vulnerability exists in the improper accessing of objects in memory by VBScript engine. Attackers looking to take advantage of this vulnerability could persuade a user to click on a link that will lead to a specially crafted website that hosts an exploit to this vulnerability.


  • CVE-2020-1214 - VBScript Remote Code Execution Vulnerability
    Risk Rating: Important

    This remote code execution vulnerability exists in the handling of objects in memory by VBScript engine. Attackers looking to take advantage of this vulnerability could persuade a user to click on a link that will lead to a specially crafted website that hosts an exploit to this vulnerability.


  • CVE-2020-1260 - VBScript Remote Code Execution Vulnerability
    Risk Rating: Critical

    This remote code execution vulnerability exists in the handling of objects in memory by VBScript engine. Attackers looking to take advantage of this vulnerability could persuade a user to click on a link that will lead to a specially crafted website that hosts an exploit to this vulnerability.


  • CVE-2020-1215 - VBScript Remote Code Execution Vulnerability
    Risk Rating: Important

    This remote code execution vulnerability exists in the way the handling of objects in memory by the VBScript engine. Attackers looking to exploit this vulnerability could find ways to convince a user of a vulnerable machine to connect to a malicious website.


  • CVE-2020-1216 - VBScript Remote Code Execution Vulnerability
    Risk Rating: Critical

    This remote code execution vulnerability exists in the way the handling of objects in memory by the VBScript engine. Attackers looking to exploit this vulnerability could find ways to convince a user of a vulnerable machine to connect to a malicious website.


  • CVE-2020-1230 - VBScript Remote Code Execution Vulnerability
    Risk Rating: Important

    This remote code execution vulnerability exists in the way the handling of objects in memory by the VBScript engine. Attackers looking to exploit this vulnerability could find ways to convince a user of a vulnerable machine to connect to a malicious website.


  • CVE-2020-1301 - Microsoft Windows SMB Remote Code Execution Vulnerability
    Risk Rating: Important

    This remote code execution vulnerability exists in the improper handling of certain requests by the Microsoft Server Message Block 1.0 (SMBv1) server. Attackers looking to exploit this vulnerability must find a way to convince a user to open a specially crafted file.


  • CVE-2020-1219 - Microsoft Browser Memory Corruption Vulnerability
    Risk Rating: Critical

    This remote code execution vulnerability exists in the improper handling of objects in memory by Microsoft browsers. Attackers looking to exploit this vulnerability must find a way to convince a user to open a website that contains the exploit.


  • CVE-2020-1284 - Windows SMBv3 Client/Server Denial of Service Vulnerability
    Risk Rating: Important

    This denial of service vulnerability exists in the handling of certain requests by the Microsoft Server Message Block 3.1.1 (SMBv3) server. Attackers looking to exploit this vulnerability must find a way to convince a user to open a specially crafted file.


  TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using the Vulnerability Protection are also protected from attacks using these vulnerabilities.

Vulnerability ID DPI Rule Number DPI Rule Name Release Date Vulnerability Protection Compatibility
CVE-2020-1213 1010309 Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability (CVE-2020-1213) 9-Jun-20 YES
CVE-2020-1214 1010310 Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability (CVE-2020-1214) 9-Jun-20 YES
CVE-2020-1260 1010311 Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability (CVE-2020-1260) 9-Jun-20 YES
CVE-2020-1215 1010313 Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability (CVE-2020-1215) 9-Jun-20 YES
CVE-2020-1216 1010314 Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability (CVE-2020-1216) 9-Jun-20 YES
CVE-2020-1230 1010315 Microsoft Internet Explorer VBScript Remote Code Execution Vulnerability (CVE-2020-1230) 9-Jun-20 YES
CVE-2020-1301 1010317 Microsoft Windows SMB Remote Code Execution Vulnerability (CVE-2020-1301) 9-Jun-20 YES
CVE-2020-1219 1010318 Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CVE-2020-1219) 9-Jun-20 YES
CVE-2020-1284 1010318 Microsoft Windows SMB Denial of Service Vulnerability (CVE-2020-1284 9-Jun-20 YES

Featured Stories