September 2015 Security Update Release Summary

Today we released security updates to provide protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security TechNet Librar...

Microsoft Windows - Text Services Memory Corruption (MS15-020)

Application: Microsoft Windows Text Services memory corruption. Platforms: Windows Versions: list. Microsoft: MS15-020 Secunia: SA63220 PRL: 2015-03 Author: Francis Provencher Protek Research Lab’s Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timelin...

Security Advisory 3046015 released

Today, we released Security Advisory 3046015 to provide guidance to customers in response to the SSL/TLS issue referred to by researchers as “FREAK” Factoring attack on RSA-EXPORT Keys. Our investigation continues and we’ll take the necessary steps to protect our customers. MSRC Team...

CVE-2015-0010

The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gol...

Security feature bypass

The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gol...

CVE-2015-0010

CVE-2015-0010 affects the Windows kernel-mode Cryptography Next Generation driver (cng.sys). The vulnerability occurs when using the CRYPTPROTECTMEMORY_SAME_LOGON option, where the code path does not validate the impersonation token’s level, permitting local users to bypass decryption restriction...

CVE-2015-0004

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...

Privilege escalation

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...

two browser mem disclosure bugs (CVE-2014-1580 and CVE-something-or-other)

First of all, CVE-2014-1580 MSFA 2014-78 is a bug that caused Firefox prior to version 33 released today to leak bits of uninitialized memory when rendering certain types of truncated images onto canvas. Mozilla's advisory is here: https://www.mozilla.org/security/announce/2014/mfsa2014-78.html B...

Microsoft Yammer - Bypass & Persistent Vulnerabilities

Document Title: =============== Microsoft Yammer - Bypass & Persistent Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1330 View: https://www.youtube.com/watch?v=0w8S3uryeII Advisory: http://www.vulnerability-lab.com/getcontent.php?id=976 Release Date:...

Microsoft Pillar - Client Side SWF Cross Site Vulnerability

Document Title: =============== Microsoft Pillar - Client Side SWF Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1328 https://www.youtube.com/watch?v=jVMHhCxM2pY Release Date: ============= 2014-09-29 Vulnerability Laboratory ID VL-ID:...

Microsoft Sharepoint - Bypass & Persistent Vulnerability

Document Title: =============== Microsoft Sharepoint - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1024 Microsoft Security Response Center MSRC ID: 15181 Release Date: ============= 2014-01-13 Vulnerability Laborator...

Introduction: Chris Betz, new head of MSRC

By way of introduction, I am Chris Betz, the leader of the Microsoft Security Response Center MSRC. I’m stepping in to fill the shoes of Mike Reavey, who has moved on to become the General Manager of Secure Operations, still within Trustworthy Computing. Since joining the MSRC, I’ve spent time...

Microsoft MSRC RSS ASPX Cross Site Scripting

Title: ====== Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability Date: ===== 2013-07-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1026 Microsoft Security Response Center MSRC ID: 15180 Video: http://www.vulnerability-lab.com/getcontent.php?id=1028 View:...

Announcing the 2013 MSRC Progress Report featuring MAPP expansions

Over the years, our customers have come to expect a certain regularity and transparency in both our security updates and the guidance that goes with them. One regular piece of communication about our work is a yearly progress report, which provides a look into the program updates and bulletin...

Microsoft MSRC RSS ASPX - CS Cross Site Vulnerability

Document Title: =============== Microsoft MSRC RSS ASPX - CS Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1028 View: http://www.youtube.com/watch?v=wcIIFB4Gx7g Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1026 Microsoft Securi...

Design/Logic Flaw

Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host v...

CVE-2013-1450

Affected software: Microsoft Internet Explorer 8 and 9. Issue: When the Proxy Settings have the same address/port in HTTP and Secure rows, IE does not properly reuse TCP sessions to the proxy, allowing a remote attacker to obtain sensitive information (e.g., a Cookie header) via a crafted HTML do...

Skype Account Service - Expire Token Bypass Vulnerability

Document Title: =============== Skype Account Service - Expire Token Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=762 Download: http://www.vulnerability-lab.com/resources/videos/762.wmv View: http://www.youtube.com/watch?v=lrNj785QQlg Advisory:...

Microsoft Partner Service - Persistent Web Vulnerability

Document Title: =============== Microsoft Partner Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=433 http://www.vulnerability-lab.com/getcontent.php?id=439 MSRC ID: 12209nj Release Date: ============= 2012-04-13...