Monthly Security Bulletin Briefing - TechNet Blogs

More documents

Recommendations

Info

MS13-048 Vulnerability in Windows Kernel Could Allow Information Disclosure (2839229) Affected Software: Windows XP SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 for 32-bit Systems SP2 Windows 7 for 32-bit Systems SP1 Windows 8 for 32-bit Systems Detection and Deployment Severity | Important Deployment Priority 3 Restart Requirement A restart is required Update Replacement MS13-031 MS13-046 More Information and / or Known Issues None Uninstall Support Use Add or Remove Programs in Control Panel WU MU MBSA WSUS ITMU SCCM * The Microsoft Baseline Security Analyzer (MBSA) tool does not support Windows 8 or Windows Server 2012 Yes Yes Yes * Yes Yes Yes GBS Security Worldwide Programs 6
MS13-048 Vulnerability in Windows Kernel Could Allow Information Disclosure (2839229) Vulnerability Details: • An information disclosure vulnerability exists when the Kernel improperly handles objects in memory. • An attacker with valid logon credentials could log on locally and run a specially crafted application to disclose information from kernel addresses. CVE Severity Impact XI Latest XI Legacy XI DoS Public Exploited Advisory CVE-2013-3136 Important Information Disclosure 3 3 P No No None Attack Vectors • A maliciously crafted application Mitigations • An attacker must have valid logon credentials and be able to log on locally to exploit these vulnerabilities Workarounds • Microsoft has not identified any workarounds for any of these vulnerabilities Exploitability Index: DoS Rating: 1 - Exploit code likely | 2 - Exploit code difficult | 3 - Exploit code unlikely | NA - Not Affected | * - Not Rated T = Temporary (DoS ends when an attack ceases) | P = Permanent (Administrative action required to recover) GBS Security Worldwide Programs 7
Page 1 and 2: Monthly Security Bulletin Briefing
Page 3 and 4: June 2013 Security Bulletins Bullet
Page 5: MS13-047 Cumulative Security Update
Page 9 and 10: MS13-049 Vulnerability in Kernel-Mo
Page 11 and 12: MS13-050 Vulnerability in Windows P
Page 13 and 14: MS13-051 Vulnerability in Microsoft
Page 15 and 16: Security Advisory Rerelease Securit
Page 17 and 18: Microsoft Support Lifecycle Lifecyc
Page 19 and 20: TechNet Public Webcast TechNet Webc
Page 21 and 22: Malicious Software Removal Tool Upd
Page 23 and 24: June 2013 Non- Security Content (Wi

Monthly Security Bulletin Briefing - TechNet Blogs

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?