RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities

Bugtraq ID:	57137
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Jan 03 2013 12:00AM
Updated:	Jan 08 2013 07:50PM
Credit:	Microsoft
Vulnerable:	Microsoft Word Viewer 0 Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista Service Pack 2 0 Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for x64-based Systems 0 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 Enterprise x64 Edition SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for 32-bit Systems 0 Microsoft Office Compatibility Pack SP3 Microsoft Office Compatibility Pack SP2 Microsoft Office 2007 SP3 Microsoft Office 2007 SP2 Microsoft Office 2003 SP3 Microsoft Expression Web 2
Not Vulnerable:

RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities

Microsoft has released advance notification that on January 8, 2013, they will be releasing seven security bulletins addressing twelve vulnerabilities.

The bulletins and their affected components are as follows:

Two bulletins rated 'Critical' affecting Microsoft Windows, Office, Developer Tools, and Microsoft Server Software
Five bulletins rated 'Important' affecting Microsoft Windows, .NET Framework, and Microsoft Server Software

This BID is being retired. The following individual records exist to better document the issues:

55401 Microsoft System Center Operations Manager CVE-2013-0009 Cross Site Scripting Vulnerability
55408 Microsoft System Center Operations Manager CVE-2013-0010 Cross Site Scripting Vulnerability
57116 Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
57122 Microsoft XML Core Services CVE-2013-0007 Remote Code Execution Vulnerability
57124 Microsoft .NET Framework CVE-2013-0001 Information Disclosure Vulnerability
57126 Microsoft .NET Framework CVE-2013-0002 Remote Privilege Escalation Vulnerability
57114 Microsoft .NET Framework CVE-2013-0003 Remote Privilege Escalation Vulnerability
57113 Microsoft .NET Framework CVE-2013-0004 Remote Privilege Escalation Vulnerability
57141 Microsoft OData CVE-2013-0005 Denial Of Service Vulnerability
57142 Microsoft Windows Print Spooler Service CVE-2013-0011 Remote Code Execution Vulnerability
57135 Microsoft Windows CVE-2013-0008 Local Privilege Escalation Vulnerability
57144 Microsoft Windows SSLv3/TLS CVE-2013-0013 Security Bypass Vulnerability

RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities

Solution:
Microsoft plans to release fixes to address these issues on January 8, 2013.

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft January 2013 Advance Notification Multiple Vulnerabilities

References:

• Microsoft Homepage (Microsoft)