Alert GCSA-09075 - Vulnerabilita' in Microsoft Remote Desktop

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

      Alert ID : GCSA-09075
          Data : 12 Agosto 2009
        Titolo : Vulnerabilita' in Microsoft Remote Desktop Connection (MS09-044)

******************************************************************


:: Descrizione del problema

Sono state riscontrate vulnerabilita' multiple in Microsoft Windows e 
Microsoft Remote Desktop Connection Client for Mac, che potrebbero essere 
sfruttate per compromettere un sistema utente.

La prima vulnerabilita' e' dovuta ad un errore nella libreria RDP (Remote 
Desktop Connection) mstscax.dll durante l'elaborazione di risposte server, e 
potrebbe essere sfruttata per provocare corruzione arbitraria di memoria 
inducendo l'utente a connettersi a server RDP malevoli.

La seconda vulnerabilita' e' dovuta ad un errore nel controllo ActiveX Remote 
Desktop Web Connection e potrebbe essere sfruttata per causare un heap-based 
buffer overflow inducendo l'utente a visitare siti web malevoli.


:: Software interessato

Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 2
Microsoft Windows XP Service Pack 3
Microsoft Windows XP Professional x64 Edition Service Pack 2
Microsoft Windows Server 2003 Service Pack 2
Microsoft Windows Server 2003 x64 Edition Service Pack 2
Microsoft Windows Server 2003 SP2 (Itanium)
Microsoft Windows Vista
Microsoft Windows Vista Service Pack 1
Microsoft Windows Vista Service Pack 2
Microsoft Windows Vista x64 Edition
Microsoft Windows Vista x64 Edition Service Pack 1
Microsoft Windows Vista x64 Edition Service Pack 2
Microsoft Windows Server 2008 (32-bit)
Microsoft Windows Server 2008 (32-bit) Service Pack 2
Microsoft Windows Server 2008 (x64)
Microsoft Windows Server 2008 (x64) Service Pack 2
Microsoft Windows Server 2008 (Itanium)
Microsoft Windows Server 2008 (Itanium) Service Pack 2


:: Impatto

Compromissione del sistema
Esecuzione di codice arbitrario


:: Soluzioni

Applicare gli aggiornamenti rilasciati da Microsoft:
http://www.microsoft.com/technet/security/Bulletin/MS09-044.mspx


:: Riferimenti

Microsoft Security Bulletin MS09-044
http://www.microsoft.com/technet/security/Bulletin/MS09-044.mspx

Secunia
http://secunia.com/advisories/36229/

VuPEN
http://www.vupen.com/english/advisories/2009/2238

Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1133
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1929

-----BEGIN PGP SIGNATURE-----

iQCVAwUBSoLJMPOB+SpikaiRAQJygQP+IpX0byI8OcIy5W8Eu9S+KVH3HgBw0CTc
A/h2GDdxKhemTUueMt8ghu3o1X5R8NeDMADeBQgR9Jj7L5Cz5rZxACC4ZP32MZtm
LhHi/IirYRnGJMJJMLayX5ncZK2DoSSljfKS7ivZj29VqcxRjugpyYUv7Fbx5FPL
hjM/VsjMo58=
=4bGG
-----END PGP SIGNATURE-----