[ACSA-2012-16] - Microsoft Office CGM Images Memory Corruption CVE-2012-2524 Remote Code Execution Vulnerability

More on Microsoft security front.

As you might know, MS12-AUG is out on 14 Aug 2012.

Among the patches, there is one which addresses a vulnerability on CGM images corruption that I have reported to MS.

Details follow:

• ACSA-2012-16 - MSOffice CGM buffer overflow crashes
• MS12-057 Vulnerability in Microsoft Office Could Allow Remote Code Execution (2731879)
• CVE-2012-2524 Microsoft Office Memory Corruption Remote Code Execution Vulnerability

Related (older) reports, CVEs, patches:

• MS10-105 - Vulnerabilities in Microsoft Office Graphics Filters Could Allow for Remote Code Execution
• Microsoft Office CGM Image Converter (CVE-2010-3945) Buffer Overflow Vulnerability
• ACSA-2012-05 - MSOffice EPS Stack based overflow crash

Stay secure!

Securely yours,
Andrei

UPDATE: You can subscribe to postscript-sec@andreicostin.com for notifications and tools & PoC releases.

Small updates on the Xerox security front.

Few days back Xerox issued its Security Bulletin XRX12-005 and the P49 security patch.

Read more! »

Updates on the Oracle Java security front.

Few days back Oracle issued it’s June patch/CPU for Java marked as highly critical and containing a vulnerability (CVSS 2.1) numbered:

• ACSA-2012-03 - Java Print Spooling Data Leak
• Oracle S0154919 “DATA LEAK IN UNIXPRINTJOB AND PSPRINTERJOB”
• Secunia SA49472
• CVE-2012-1717

Read more! »

Download here

Code:

[ACSA-2012-12] - HP WJA Multiple XSS vulnerabilities

First, I would like to thank HP SSRT security team for great communication and cooperation on the report.

Other advisory numbers: HPSBPI02779 SSRT100855, CVE-2012-2011

HP WJA
- uses non-secure transport protocol (read MITM)
- does not implement or at least verify secure-hashing i.e. authenticated&authorized origins of the DOWNLOADED files
- has several XSS vulnerabilities (perhaps many more to be discovered)

Read more! »