Alert GCSA-11013 - MS11-012 Vulnerabilita' in Windows Kernel-Mode

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

Alert ID : GCSA-11013
Data : 11 febbraio 2011
Titolo : MS11-012 Vulnerabilita' in Windows Kernel-Mode Drivers (2479628)

******************************************************************

:: Descrizione del problema

Microsoft ha rilasciato un aggiornamento di sicurezza
che risolve cinque vulnerabilita' presenti nei drivers
kernel-mode di Windows.

Le vulnerabilita' potrebbero consentire un incremento dei privilegi
se un aggressore in possesso di credenziali locali valide
riesce a lanciare un'applicazione artefatta.

Le vulnerabilita' non possono essere sfruttate da remoto o
da utenti anonimi.


:: Software interessato

Windows XP SP3
Windows XP Pro x64 Edition SP2
Windows Vista SP1
Windows Vista SP2
Windows Vista x64 Edition SP1
Windows Vista x64 Edition SP2
Windows 7 (32-bit)
Windows 7 (x64)
Windows Server 2003 SP2
Windows Server 2003 x64 Edition SP2
Windows Server 2003 SP2 (Itanium)
Windows Server 2008 (32-bit)
Windows Server 2008 (32-bit) SP2
Windows Server 2008 (x64)
Windows Server 2008 (x64) SP2
Windows Server 2008 (Itanium)
Windows Server 2008 (Itanium) SP2
Windows Server 2008 R2 (x64)
Windows Server 2008 R2 (Itanium)


:: Impatto

Elevation of privileges
Compromissione del sistema


:: Soluzioni

Installare manualmente la patch indicata nel bollettino Microsoft,
oppure utilizzare uno degli strumenti di aggiornamento come:
Aggiornamenti Automatici, Windows Update, Microsoft Update,
Windows Server Update Services, Systems Management Server.


:: Riferimenti

Microsoft Security Bulletin
http://www.microsoft.com/technet/security/Bulletin/MS11-012.mspx

Microsoft Knowledge Base
http://support.microsoft.com/kb/2479628

Microsoft Update
http://windowsupdate.microsoft.com
https://www.update.microsoft.com/
http://support.microsoft.com/kb/294871

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0086
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0087
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0088
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0089
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0090

ISC SANS
http://isc.sans.edu/diary.html?storyid=10375

Vupen Security
http://www.vupen.com/english/advisories/2011/0325


-----BEGIN PGP SIGNATURE-----

iQCVAwUBTVT68vOB+SpikaiRAQI4dAP/Q530sAKLew1kUBlmpNbXnEiO8Fyzxj0/
mcHCcyUeBopyohZCDdFQljdc7W5q8I3/pDTCOavmSBPEDcu7G2UYaa4bGR3JhxHt
ZEj9XnOMq2ZfBvAY9q8Uzu+AGk0NPnzUA9xYXYpFsO83tWzcYumtSomdQhKVE45i
ttLC9NJOP+M=
=Ei17
-----END PGP SIGNATURE-----