PT-2012-2358 · Microsoft · Silverlight+2

Alin Rad Pop · Published 2012-05-08 · Updated 2018-10-12 · CVE-2012-0159

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview Office versions 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 Silverlight versions 4 before 4.1.10329 Silverlight versions 5 before 5.1.10411

Description A remote code execution issue exists in the way affected components handle a specially crafted TrueType font file. This could allow remote code execution if a user opens a specially crafted TrueType font file. An attacker who successfully exploits this issue could take complete control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows versions XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview, update to a version that includes the fix for the TrueType font parsing issue. For Office versions 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1, update to a version that includes the fix for the TrueType font parsing issue. For Silverlight versions 4 before 4.1.10329, update to version 4.1.10329 or later. For Silverlight versions 5 before 5.1.10411, update to version 5.1.10411 or later. As a temporary workaround, consider avoiding the use of specially crafted TrueType font files until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-0159

ZDI-12-129

Affected Products

Office

Silverlight

Windows

References · 16

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-12-129 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-0159 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0159 · Security Note
• http://us-cert.gov/cas/techalerts/TA12-129A.html · Note
• http://us-cert.gov/cas/techalerts/TA12-164A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75124 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-034 · Note
• http://secunia.com/advisories/49121 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0159 · Note
• http://securityfocus.com/bid/53335 · Note
• http://securitytracker.com/id?1027039 · Note