9.3 - MS12-082

Executive Summary

Summary
Title	Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660)

Informations
Name	MS12-082	First vendor Publication	2012-12-11
Vendor	Microsoft	Last vendor Modification	2013-07-09
Severity (Vendor)	Important	Revision	1.2

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Revision Note: V1.2 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2770660 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their systems do not need to take any action.

Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker convinces a user to view a specially crafted Office document with embedded content. An attacker who successfully exploits this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Original Source

Url : http://technet.microsoft.com/en-us/security/bulletin/ms12-082

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16086

Oval ID:	oval:org.mitre.oval:def:16086
Title:	DirectPlay Heap Overflow Vulnerability - MS12-082
Description:	Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted Office document, aka "DirectPlay Heap Overflow Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-1537	Version:	7
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows Server 2012 Microsoft Windows 8	Product(s):
Definition Synopsis:
win xp 32 bit/version Microsoft Windows XP (x86) SP3 is installed AND Check if the version of dpnet.dll is less than 5.3.2600.6311 OR win xp 64 bit/server 2003/version server 2003/win xp Microsoft Windows Server 2003 (ia64) SP2 is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x64) is installed AND Microsoft Windows XP x64 Edition SP2 is installed AND Check if the version of dpnet.dll is less than 5.3.3790.5083 OR vista/server 2008/version vista/server 2008 Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND GDR/LDR Check if the version of dpnet.dll is less than 6.0.6002.18722 OR LDR range Check if the version of dpnet.dll is less than 6.0.6002.22964 AND Check if the version of dpnet.dll is greater than or equal to 6.0.6002.22000 OR win 7/server 2008 R2/version win 7/server 2008 R2 Microsoft Windows 7 is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND GDR/LDR Check if the version of dpnet.dll is less than 6.1.7600.17157 OR LDR range Check if the version of dpnet.dll is less than 6.1.7600.21360 AND Check if the version of dpnet.dll is greater than or equal to 6.1.7600.20000 OR win 7 sp1/server 2008 R2 sp1/version win 7 sp1/server 2008 R2 sp1 Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND GDR.LDR Check if the version of dpnet.dll is less than 6.1.7601.17989 OR LDR range Check if the version of dpnet.dll is less than 6.1.7601.22150 AND Check if the version of dpnet.dll is greater than or equal to 6.1.7601.21000 OR Win 8 and Server 2012 vulnerable file version Win 8 / Server 2012 Microsoft Windows 8 is installed AND Microsoft Windows Server 2012 is installed AND Check for vulnerable version Check if the version of dpnet.dll is less than 6.2.9200.16450 OR Check for LDR range Check if the version of dpnet.dll is greater than or equal to 6.2.9200.20000 AND Check if the version of dpnet.dll is less than 6.2.9200.20554

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Directx cpe:2.3:a:microsoft:directx:11.1:::::::* cpe:2.3:a:microsoft:directx:11.0:::::::* cpe:2.3:a:microsoft:directx:10.1:::::::* cpe:2.3:a:microsoft:directx:10.0:::::::* cpe:2.3:a:microsoft:directx:9.0:::::::*	5

OpenVAS Exploits

Date	Description
2012-12-12	Name : Microsoft Windows DirectPlay Remote Code Execution Vulnerability (2770660) File : nvt/secpod_ms12-082.nasl

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-12-13	IAVM : 2012-B-0124 - Microsoft Windows DirectPlay Remote Code Execution Vulnerability Severity : Category II - VMSKEY : V0035487

Snort® IPS/IDS

Date	Description
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37994 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37993 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37992 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37991 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37990 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37989 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37988 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37987 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37986 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37985 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37984 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37983 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37982 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37981 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37980 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37979 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37978 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37977 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37976 - Revision : 1 - Type : FILE-OFFICE
2016-04-05	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 37975 - Revision : 1 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28343 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28342 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28341 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28340 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28339 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28338 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28337 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28336 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28335 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28334 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28333 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28332 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 28331 - Revision : 6 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24970 - Revision : 10 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24969 - Revision : 9 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24968 - Revision : 9 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24967 - Revision : 9 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24966 - Revision : 9 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24965 - Revision : 9 - Type : FILE-OFFICE
2014-01-10	Microsoft Office dpnet.dll DirectPlay CFixedPool-Get clsid access RuleID : 24964 - Revision : 9 - Type : FILE-OFFICE
2014-01-10	Microsoft DirectPlay ActiveX clsid access RuleID : 24963 - Revision : 11 - Type : BROWSER-PLUGINS
2014-01-10	Microsoft dpnet.dll DirectPlay ActiveX clsid access RuleID : 24962 - Revision : 11 - Type : BROWSER-PLUGINS
2014-01-10	Microsoft dpnet.dll DirectPlay ActiveX clsid access RuleID : 24961 - Revision : 11 - Type : BROWSER-PLUGINS
2014-01-10	Microsoft dpnet.dll DirectPlay ActiveX clsid access RuleID : 24960 - Revision : 11 - Type : BROWSER-PLUGINS
2014-01-10	Microsoft dpnet.dll DirectPlay ActiveX clsid access RuleID : 24959 - Revision : 11 - Type : BROWSER-PLUGINS
2014-01-10	Microsoft dpnet.dll DirectPlay ActiveX clsid access RuleID : 24958 - Revision : 11 - Type : BROWSER-PLUGINS
2014-01-10	Microsoft dpnet.dll DirectPlay ActiveX clsid access RuleID : 24957 - Revision : 11 - Type : BROWSER-PLUGINS

Nessus® Vulnerability Scanner

Date	Description
2012-12-11	Name : The remote Windows host could allow arbitrary code execution. File : smb_nt_ms12-082.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:47:30	Multiple Updates
2014-01-19 21:30:54	Multiple Updates
2013-11-11 12:41:31	Multiple Updates
2013-07-09 21:29:51	Multiple Updates
2013-07-09 21:16:45	Multiple Updates
2012-12-13 05:19:49	Multiple Updates
2012-12-13 05:15:44	Multiple Updates
2012-12-12 17:22:00	Multiple Updates
2012-12-12 13:20:10	Multiple Updates
2012-12-11 21:17:45	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	5
Openvas Exploit(s)	1
IAVM(s)	1
Snort® Rule(s)	47
Nessus® Exploit(s)	1

	Related
9.3	MS12-001
9.3	CVE-2012-1537
6.8	MS12-050
4.3	MS12-066
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 4 more Alert(s)

9.3 - MS12-082

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Information Assurance Vulnerability Management (IAVM)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU