Alert GCSA-08034 - MS08-021 Vulnerabilita' in Microsoft Windows GDI

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

    Alert ID : GCSA-08034
        Data : 09 aprile 2008
      Titolo : MS08-021 Vulnerabilita' in Microsoft Windows GDI (948590)

******************************************************************


:: Descrizione del problema

    Sono state individuate due vulnerabilita' nel Graphics Rendering
    Engine (GDI) di Windows, che potrebbero consentire l'esecuzione
    di codice arbitrario se vengono aperti file di tipo EMF o WMF
    opportunamente artefatti.


:: Software interessato

    Windows 2000 SP4
    Windows XP SP2
    Windows XP Pro x64 Edition
    Windows XP Pro x64 Edition SP2
    Windows Server 2003 SP1
    Windows Server 2003 SP2
    Windows Server 2003 x64 Edition
    Windows Server 2003 x64 Edition SP2
    Windows Server 2003 with SP1 per sistemi Itanium
    Windows Server 2003 with SP2 per sistemi Itanium
    Windows Vista
    Windows Vista SP1
    Windows Vista x64 Edition
    Windows Vista x64 Edition SP1
    Windows Server 2008 per sistemi 32-bit
    Windows Server 2008 per sistemi x64
    Windows Server 2008 per sistemi Itanium


:: Impatto

    Esecuzione remota di codice arbitrario
    Conquista del controllo completo sul sistema
    Installazione di programmi
    Lettura, modifica e cancellazione di dati
    Creazione di nuovi account


:: Soluzioni

    Installare manualmente la patch elencata nel bollettino Microsoft,
    oppure utilizzare uno degli strumenti di aggiornamento come:
    Aggiornamenti Automatici, Windows Update, Microsoft Update,
    Windows Server Update Services.


:: Riferimenti

    Microsoft Security Bulletin
    http://www.microsoft.com/technet/security/bulletin/MS08-021.mspx

    Microsoft Knowledge Base
    http://support.microsoft.com/kb/948590

    Microsoft Update
    https://update.microsoft.com/microsoftupdate/

    Mitre's CVE ID
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1083
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1087

    Secunia advisories
    http://secunia.com/advisories/29704/

    FrSIRT
    http://www.frsirt.com/english/advisories/2008/1145

    Securityfocus Bugtraq ID
    http://www.securityfocus.com/bid/28570
    http://www.securityfocus.com/bid/28571

    SANS Internet Storm Center
    http://isc.sans.org/diary.html?storyid=4264

    Zero Day Initiative Advisory
    http://www.zerodayinitiative.com/advisories/ZDI-08-020

    iDefense Labs
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=681
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=682

-----BEGIN PGP SIGNATURE-----

iQCVAwUBR/zJPvOB+SpikaiRAQIvLwP9FsswCJlaPP0hT9WGBZFn7EKP7prEJNYQ
M88YC7Q/GmbReZsMKo1Saz/jN6IX2483ai+Clc1iwUwtF1vCasSIwWEqFkHPA/Fm
seFMBcQXTKAW6rZZsRLB79up0kVe2cFa8sBbuk5oZm8XmEUg0imgRaqKSkOI4A9Z
6i4+RG+hDzQ=
=fLEK
-----END PGP SIGNATURE-----