Severity: : Medium
  Advisory Date: 13 de сентября de 2011

  DESCRIPTION

Microsoft addresses the following vulnerabilities in its September batch of patches:

  • (MS11-070) Vulnerability in WINS Could Allow Elevation of Privilege (2571621)
    Risk Rating: Important

    This security update addresses an undisclosed vulnerability in the Windows Internet Name service (WINS), which may allow elevation of privilege. This may happen once user receives a specially made WINS packet on an affected system with WINS service. However, an attacker needs a valid logon credentials before exploiting this software bug locally. Read more here.


  • (MS11-071) Vulnerability in Windows Components Could Allow Remote Code Execution (2570947)
    Risk Rating: Important

    This security update fixes a disclosed vulnerability in Windows, which could allow arbitrary code execution if users open a legitimate .RTF, .TXT, or .DOC file located in the same network as a malicious .DLL file. Successfully exploiting this vulnerability may give an attacker the same user rights as the local user. Read more here.


  • (MS11-072) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505)
    Risk Rating: Important

    This security update addresses five vulnerabilities in Microsoft Office that may allow an attacker to execute arbitrary code if unwitting users open a maliciously crafted Microsoft Excel file. Exploiting these bugs could give an attacker the same user rights as the logged-on user. Read more here.


  • (MS11-073) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634)
    Risk Rating: Important

    This security update addresses two reported vulnerabilities in Microsoft Office that may allow arbitrary code execution once users open a malicious Office file or if users open a legitimate Officefile located in the same network as the malicious file. Read more here.


  • (MS11-074) Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858)
    Risk Rating: Important

    This security update addresses five privately reported vulnerabilities and one publicly reported vulnerability Microsoft SharePoint and Windows SharePoint Services. The most severe of these vulnerabilities could lead to an elevation of privilege if a user clicks or visits a malicious website. However, users using Internet Explorer 8 and 9 are at a reduced risk, since the XSS filter in these versions help block the attack. Read more here.

  INFORMATION EXPOSURE

Trend Micro Deep Security shields the following vulnerabilities using the specified rules. Trend Micro customers using OfficeScan with the Intrusion Defense Firewall plugin are also protected from attacks using these vulnerabilities.

Microsoft Bulletin ID Vulnerability ID Rule Number & Title Deep Security Pattern Version Deep Security Pattern Release Date
MS11-071 CVE-2011-1991 1004798 - Windows Components Insecure Library Loading Vulnerability Over WebDAV 11-027 Sept 13, 2010
1004797 - Windows Components Insecure Library Loading Vulnerability Over Network Share 11-027 Sept 13, 2010
MS11-074 CVE-2011-1892 1004796 - SharePoint Remote File Disclosure Vulnerability 11-027 Sept 13, 2010
MS11-072 CVE-2011-1986 1004792 - Excel Use After Free WriteAV Vulnerability 11-027 Sept 13, 2010
MS11-072 CVE-2011-1987 1004793 - Excel Out Of Bounds Array Indexing Vulnerability 11-027 Sept 13, 2010
MS11-072 CVE-2011-1988 1004795 - Excel Heap Corruption Vulnerability 11-027 Sept 13, 2010

  OtherInformation