MicrosoftKB2566220MS11-053: Vulnerability in Bluetooth Stack could allow remote code execution: July 12, 2011
8.8 High
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:C/I:C/A:C
<html><body><p>Resolves a vulnerability in the Windows Bluetooth Stack that could allow remote code execution if an attacker sent a series of specially crafted Bluetooth packets to an affected system.</p><h2>INTRODUCTION</h2><div>Microsoft has released security bulletin MS11-053. To view the complete security bulletin, visit one of the following Microsoft websites:<br /><ul><li>Home users:<br /><div><a href=“http://www.microsoft.com/security/pc-security/bulletins/201107.aspx” target=“_self”>http://www.microsoft.com/security/pc-security/bulletins/201107.aspx</a></div><span>Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update Web site now:<br /><div><a href=“http://update.microsoft.com/microsoftupdate/” target=“_self”>http://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals:<br /><div><a href=“http://www.microsoft.com/technet/security/bulletin/ms11-053.mspx” target=“_self”>http://www.microsoft.com/technet/security/bulletin/MS11-053.mspx</a></div></li></ul><span><h3>How to obtain help and support for this security update</h3> <br />Help installing updates: <br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <br /><a href=“http://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help protect your computer that is running Windows from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <br /><a href=“https://support.microsoft.com/common/international.aspx” target=“_self”>International Support</a><br /><br /></span></div><h2>More Information</h2><div><h3>Known issues and additional information about this security update</h3><br /><br /> <br /> The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed below each article link.<br /><br /><ul><li><div><a href=“https://support.microsoft.com/en-us/help/2532531”>2532531 </a>MS11-053: Description of the update for Bluetooth Stack for Windows 7 and Windows Vista Service Pack 2: July 12, 2011</div>Known issues in security update 2532531:<br /><br /><br /><ul><li>If you are running Windows 7, we recommend that you install update 2552343 before you install this security update. Your system is automatically offered update 2552343 when you use Microsoft Update. <br /><br /></li><li>After you install this security update, you may be prompted to install this security update again when you scan the system by using Windows Update, Microsoft Update, Microsoft Windows Server Update Services (WSUS) server or Microsoft Baseline Security Analyzer (MBSA). This issue may occur if you installed this security update, but you have not installed update 2552343. To resolve this issue, approve the installation of update 2552343 in WSUS or install update <a href=“https://support.microsoft.com/help/2552343” target=“_self”>2552343</a> from Windows Update, Microsoft Update or from the Microsoft Download center, or re-install the security update a second time. You should not see any subsequent re-offer.<br /> <br /><br />For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/2552343”>2552343 </a> Time-out error occurs when you install a Windows Update package that contains drivers on a computer that is running Windows 7 or Windows Server 2008 R2 </div></li><li><span>Affected Windows Vista SP1 systems that are upgraded to Windows Vista SP2</span><br /><br />Consider the following scenario. You are running a system that was upgraded from Windows Vista Service Pack 1 to Windows Vista Service Pack 2. Regardless if the system has update 942567 installed, the system will have support for Bluetooth 2.1 technology and is affected by this vulnerability. Therefore, you must install this security update. <br /><br /><br /><br />For more information about update 942567, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/942567”>942567 </a> Description of the Windows Vista Feature Pack for Wireless</div></li><li><span>Windows Vista and Windows 7 systems without Bluetooth technology</span><br /><br />Windows Vista and Windows 7 support a wide range of Bluetooth radios. Windows Vista and Windows 7 will install the Bluetooth driver when a removable Bluetooth device is added to the system. In order to protect customers in this situation, all Windows Vista SP2 and Windows 7 systems are considered to be affected by this vulnerability, even if the system does not currently have a Bluetooth device installed. <br /><br /><br />For more information, visit the following MSDN webpage:<br /><div><a href=“http://msdn.microsoft.com/en-us/windows/hardware/gg487349.aspx” target=“_self”>Bluetooth Wireless Technology FAQ - 2010</a></div></li></ul></li><li><div><a href=“https://support.microsoft.com/en-us/help/2561109”>2561109 </a> <br />MS11-053: Description of the update for Bluetooth Stack for Windows Vista Service Pack 1: July 12, 2011</div>Known issues in security update 2561109:<br /><ul><li><span>Affected Windows Vista SP1 systems</span><br /><br />If you are running Windows Vista Service Pack 1 and you have installed update 942567, your system will have support for Bluetooth 2.1 technology and is affected by this vulnerability. Therefore, you must install this security update. <br /><br />If you are running Windows Vista Service Pack 1 and you have not installed update 942567, your system will not have support for Bluetooth 2.1 technology and is not affected by this vulnerability. <br /> <br /><br />For more information about update 942567, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/942567”>942567 </a> Description of the Windows Vista Feature Pack for Wireless</div></li></ul></li></ul></div></body></html>
Related
8.8 High
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:C/I:C/A:C