RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities

Bugtraq ID:	58380
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Mar 07 2013 12:00AM
Updated:	Mar 18 2013 12:35PM
Credit:	Microsoft
Vulnerable:	Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista Service Pack 2 0 Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for x64-based Systems 0 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 Enterprise Edition Itanium SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for 32-bit Systems 0 Microsoft Visio Viewer 2010 (64-bit Edition) SP1 Microsoft Visio Viewer 2010 (32-bit Edition) SP1 Microsoft Silverlight 5.0 Microsoft SharePoint Foundation 2010 SP1 Microsoft Office SharePoint Server 2010 SP1 Microsoft Office 2011 for Mac 0 Microsoft Office 2008 for Mac 0 Microsoft Internet Explorer 9 + Microsoft Windows 7 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems 0 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems 0 + Microsoft Windows 7 Home Premium - Sp1 X64 + Microsoft Windows 7 Home Premium - Sp1 X32 + Microsoft Windows Server 2008 R2 + Microsoft Windows Server 2008 for 32-bit Systems SP2 + Microsoft Windows Server 2008 for 32-bit Systems 0 + Microsoft Windows Server 2008 for x64-based Systems SP2 + Microsoft Windows Server 2008 for x64-based Systems 0 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Vista SP2 + Microsoft Windows Vista SP1 + Microsoft Windows Vista x64 Edition SP2 + Microsoft Windows Vista x64 Edition SP1 + Microsoft Windows Vista x64 Edition 0 Microsoft Internet Explorer 8 + Microsoft Windows 7 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems 0 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems 0 + Microsoft Windows 7 Home Premium 0 + Microsoft Windows 7 Home Premium - Sp1 X64 + Microsoft Windows 7 Home Premium - Sp1 X32 + Microsoft Windows Server 2008 R2 + Microsoft Windows Server 2003 Sp2 X64 + Microsoft Windows Server 2003 SP2 + Microsoft Windows Server 2003 Sp1 X64 + Microsoft Windows Server 2003 SP1 + Microsoft Windows Server 2008 R2 SP1 + Microsoft Windows Server 2008 for x64-based Systems SP2 + Microsoft Windows Server 2008 R2 x64 SP1 + Microsoft Windows Server 2008 R2 x64 0 + Microsoft Windows Server 2008 Standard Edition X64 + Microsoft Windows Server 2008 Standard Edition SP2 + Microsoft Windows Server 2008 Standard Edition 0 + Microsoft Windows Server 2008 Standard Edition - Sp2 Web + Microsoft Windows Vista SP2 + Microsoft Windows Vista SP1 + Microsoft Windows Vista Home Premium SP2 + Microsoft Windows Vista Home Premium SP1 + Microsoft Windows Vista Home Premium + Microsoft Windows Vista Home Basic SP2 + Microsoft Windows Vista Home Basic SP1 + Microsoft Windows Vista Home Basic + Microsoft Windows Vista Enterprise SP2 + Microsoft Windows Vista Enterprise SP1 + Microsoft Windows Vista Enterprise + Microsoft Windows Vista Business SP2 + Microsoft Windows Vista Business SP1 + Microsoft Windows Vista 0 + Microsoft Windows Vista Business 64-bit edition SP2 + Microsoft Windows Vista Business 64-bit edition SP1 + Microsoft Windows Vista Business 64-bit edition 0 + Microsoft Windows Vista Enterprise 64-bit edition SP2 + Microsoft Windows Vista Enterprise 64-bit edition SP1 + Microsoft Windows Vista Enterprise 64-bit edition 0 + Microsoft Windows Vista Home Basic 64-bit edition Sp2 X64 + Microsoft Windows Vista Home Basic 64-bit edition SP2 + Microsoft Windows Vista Home Basic 64-bit edition SP1 + Microsoft Windows Vista Home Basic 64-bit edition 0 + Microsoft Windows Vista Home Premium 64-bit edition SP2 + Microsoft Windows Vista Home Premium 64-bit edition SP1 + Microsoft Windows Vista Home Premium 64-bit edition 0 + Microsoft Windows XP 0 + Microsoft Windows XP Embedded SP3 + Microsoft Windows XP Embedded SP2 + Microsoft Windows XP Embedded SP1 + Microsoft Windows XP Embedded + Microsoft Windows XP Home SP3 + Microsoft Windows XP Home SP2 + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home + Microsoft Windows XP Media Center Edition SP3 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition SP1 + Microsoft Windows XP Professional SP3 + Microsoft Windows XP Professional SP2 + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Professional x64 Edition Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 + Microsoft Windows Server 2003 SP2 + Microsoft Windows Server 2003 Sp1 X64 + Microsoft Windows Server 2003 SP1 + Microsoft Windows XP 0 + Microsoft Windows XP - Gold Home + Microsoft Windows XP - Gold 64-Bit-2002 + Microsoft Windows XP Embedded SP3 + Microsoft Windows XP Embedded SP2 + Microsoft Windows XP Embedded SP1 + Microsoft Windows XP Embedded + Microsoft Windows XP Home SP3 + Microsoft Windows XP Home SP2 + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home + Microsoft Windows XP Media Center Edition SP3 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition SP1 + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Professional SP3 + Microsoft Windows XP Professional SP2 + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional + Microsoft Windows XP Professional x64 Edition SP3 + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Professional x64 Edition + Microsoft Windows XP Service Pack 3 0 + Microsoft Windows XP Tablet PC Edition SP3 + Microsoft Windows XP Tablet PC Edition SP2 + Microsoft Windows XP Tablet PC Edition SP1 + Microsoft Windows XP Tablet PC Edition
Not Vulnerable:

RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities

Microsoft has released advance notification that on March 12, 2013, they will be releasing seven security bulletins addressing multiple vulnerabilities.

The bulletins and their affected components are as follows:

Four bulletins rated 'Critical' affecting Internet Explorer, Microsoft Silverlight, Microsoft Office, and Microsoft Server Software.

Three bulletins rated 'Important' affecting Microsoft Office and Microsoft Windows.

This BID is being retired. The following individual records exist to better document the issues:

58369 Microsoft Visio Viewer VSD File Format CVE-2013-0079 Remote Code Execution Vulnerability
58437 Microsoft Internet Explorer CVE-2013-1288 Use-After-Free Remote Code Execution Vulnerability
58387 Microsoft OneNote CVE-2013-0086 Information Disclosure Vulnerability
58327 Microsoft Silverlight Double Deference CVE-2013-0074 Remote Code Execution Vulnerability
58372 Microsoft SharePoint CVE-2013-0085 Denial of Service Vulnerability
58371 Microsoft SharePoint CVE-2013-0080 Privilege Escalation Vulnerability
58370 Microsoft SharePoint CVE-2013-0084 Directory Traversal Vulnerability
58367 Microsoft SharePoint CVE-2013-0083 Cross Site Scripting Vulnerability
58361 Microsoft Windows CVE-2013-1287 Local Privilege Escalation Vulnerability
58360 Microsoft Windows CVE-2013-1286 Local Privilege Escalation Vulnerability
58359 Microsoft Windows CVE-2013-1285 Local Privilege Escalation Vulnerability
58348 Microsoft Internet Explorer CVE-2013-0094 Use-After-Free Remote Code Execution Vulnerability
58347 Microsoft Internet Explorer CVE-2013-0093 Use-After-Free Remote Code Execution Vulnerability
58344 Microsoft Internet Explorer CVE-2013-0092 Use-After-Free Remote Code Execution Vulnerability
58346 Microsoft Internet Explorer CVE-2013-0091 Use-After-Free Remote Code Execution Vulnerability
58345 Microsoft Internet Explorer CVE-2013-0090 Use-After-Free Remote Code Execution Vulnerability
58343 Microsoft Internet Explorer CVE-2013-0089 Use-After-Free Remote Code Execution Vulnerability
58342 Microsoft Internet Explorer CVE-2013-0088 Use-After-Free Remote Code Execution Vulnerability
58341 Microsoft Internet Explorer CVE-2013-0087 Use-After-Free Remote Code Execution Vulnerability
58333 Microsoft Outlook CVE-2013-0095 Information Disclosure Vulnerability

RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft March 2013 Advance Notification Multiple Vulnerabilities

Solution:
Microsoft plans to release fixes to address these issues on March 12, 2013.

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft March 2013 Advance Notification Multiple Vulnerabilities

References:

• Microsoft Homepage (Microsoft)