Spyware, viruses, & security forum: VULNERABILITIES / FIXES - December 11, 2012

Blue Coat ProxySG OpenSSL DER Format Data Processing Vulnerabilities

Release Date : 2012-12-11

Criticality level : Highly critical
Impact : DoS
System access
Where : From remote
Solution Status : Vendor Patch

Operating System: Blue Coat ProxySG 5.x
Blue Coat ProxySG 6.x

Description:
Blue Coat has acknowledged some vulnerabilities in ProxySG, which can be exploited by malicious people to potentially compromise a vulnerable system.

The vulnerabilities exist in the bundled version of OpenSSL.

The vulnerabilities are reported in versions 5.4, 5.5, 6.1, 6.2, 6.3..

Solution:
Apply fixes (please see the vendor's advisory for details).

Original Advisory:
BlueCoat:
https://kb.bluecoat.com/index?page=content&id=SA70

http://secunia.com/advisories/51542/

Release Date : 2012-12-11

Criticality level : Less critical
Impact : System access
Where : From local network
Solution Status : Vendor Patch

Operating System : Ubuntu Linux 10.04
Ubuntu Linux 11.10
Ubuntu Linux 12.04

Description:
Ubuntu has issued an update for mysql. This fixes a vulnerability, which can be exploited by malicious users to compromise a vulnerable system.

Solution:
Apply updated packages.

Original Advisory:
USN-1658-1:
http://www.ubuntu.com/usn/usn-1658-1/

http://secunia.com/advisories/51529/

FreeVimager GIF Image Decompression Array Indexing Vulnerability

Release Date : 2012-12-11

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Unpatched

Software: FreeVimager 4.x

Description:
A vulnerability has been discovered in FreeVimager, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an array indexing error when decompressing image data. This can be exploited to corrupt memory via a specially crafted GIF image containing a large "LZWMinimumCodeSize" value.

Successful exploitation may allow execution of arbitrary code, but requires tricking a user into opening a malicious file.

The vulnerability is confirmed in version 4.1.0. Other versions may also be affected.

Solution:
No official solution is currently available.

Provided and/or discovered by:
Jean Pascal Pereira

Additional information provided by Secunia Research.

Original Advisory:
Jean Pascal Pereira:
http://packetstormsecurity.org/files/118712/FreeVimager-4.1.0-WriteAV-Arbitrary-Code-Execution.html

http://secunia.com/advisories/51518/

Microsoft Windows OpenType and TrueType Font Parsing Vulnerabilities

Release Date : 2012-12-11

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows RT
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2008
Microsoft Windows Server 2012
Microsoft Windows Storage Server 2003
Microsoft Windows Vista
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional

Description:
Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

1) An error in the OpenType Font (OTF) driver when handling certain objects can be exploited via a specially crafted font file.

2) An error when handling certain TrueType Fonts (TTF) can be exploited via a specially crafted font file.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution:
Apply patches.

Provided and/or discovered by:
1) Reported by the vendor.
2) The vendor credits Eetu Luodemaa and Joni Vahamaki, Documill via Chromium Security Rewards Program.

Original Advisory:
MS12-078 (KB2779030, KB2753842):
http://technet.microsoft.com/en-us/security/bulletin/ms12-078

http://secunia.com/advisories/51459/

Release Date : 2012-12-11

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Operating System : Microsoft Windows 7
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2008
Microsoft Windows Storage Server 2003
Microsoft Windows Vista
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional

Description:
A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when parsing file or subfolder names and can be exploited to corrupt memory e.g. via a file with a specially crafted filename.

Successful exploitation allows execution of arbitrary code.

Solution:
Apply patches.

Provided and/or discovered by:
The vendor credits Lucas Apa, IOActive.

Original Advisory:
MS12-081 (KB2758857):
http://technet.microsoft.com/en-us/security/bulletin/ms12-081

http://secunia.com/advisories/51493/

Microsoft Office Word RTF "listoverridecount" Parsing Vulnerability

Release Date : 2012-12-11

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Patch

Software: Microsoft Office 2003 Professional Edition
Microsoft Office 2003 Small Business Edition
Microsoft Office 2003 Standard Edition
Microsoft Office 2003 Student and Teacher Edition
Microsoft Office 2007
Microsoft Office 2010
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
Microsoft Office Web Apps
Microsoft Office Word Viewer
Microsoft SharePoint Server 2010

Description:
A vulnerability has been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when parsing Rich Text Format (RTF) data related to the listoverridecount and can be exploited to corrupt memory.

Successful exploitation allows execution of arbitrary code.

Solution:
Apply patches.

Provided and/or discovered by:
The vendor credits an anonymous person via SecuriTeam Secure Disclosure.

Original Advisory:
MS12-079 (KB2687412, KB2760405, KB2760410, KB2760416, KB2760421, KB2760497, KB2760498):
http://technet.microsoft.com/en-us/security/bulletin/ms12-079

http://secunia.com/advisories/51467/

Release Date: 2012-10-17
Last Update: 2012-12-11

Criticality level: Moderately critical
Impact : DoS
System access
Where: From remote
Solution Status : Vendor Patch

Software: Oracle Outside In Technology 8.x

Description:
Two vulnerabilities have been reported in Oracle Outside In Technology, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.

1) An indexing error in the JPG graphic import filter (ibjpg2.flt) when processing the number of components within a progressive DCT-based image (SOF2) can be exploited to reference an invalid memory handle via a specially crafted quantization table selector value.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

2) An unspecified error in the Outside In HTML Export SDK component can be exploited to cause a crash.

The vulnerabilities are reported in version 8.3.7.

Solution:
Apply updates.

Provided and/or discovered by:
1) Francis Provencher via Secunia.

Original Advisory:
Oracle:
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html#AppendixFMW

Francis Provencher:
http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=63&Itemid=63

http://secunia.com/advisories/50993