RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities

Bugtraq ID:	59785
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	May 09 2013 12:00AM
Updated:	May 16 2013 12:23PM
Credit:	Microsoft
Vulnerable:	Microsoft Word Viewer 0 Microsoft Word 2003 SP3 Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista Service Pack 2 0 Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Visio 2010 (64-bit editions) SP1 0 Microsoft Visio 2010 (32-bit editions) SP1 0 Microsoft Visio 2007 SP3 Microsoft Visio 2003 SP3 Microsoft Publisher 2007 SP3 0 Microsoft Publisher 2003 SP3 Microsoft Office Communicator 2007 R2 Microsoft Lync 2010 Attendee 0 Microsoft Internet Explorer 9 + Microsoft Windows 7 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems 0 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems 0 + Microsoft Windows 7 Home Premium - Sp1 X64 + Microsoft Windows 7 Home Premium - Sp1 X32 + Microsoft Windows Server 2008 R2 + Microsoft Windows Server 2008 for 32-bit Systems SP2 + Microsoft Windows Server 2008 for 32-bit Systems 0 + Microsoft Windows Server 2008 for x64-based Systems SP2 + Microsoft Windows Server 2008 for x64-based Systems 0 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Vista SP2 + Microsoft Windows Vista SP1 + Microsoft Windows Vista x64 Edition SP2 + Microsoft Windows Vista x64 Edition SP1 + Microsoft Windows Vista x64 Edition 0 Microsoft Internet Explorer 8 + Microsoft Windows 7 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems 0 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems 0 + Microsoft Windows 7 Home Premium 0 + Microsoft Windows 7 Home Premium - Sp1 X64 + Microsoft Windows 7 Home Premium - Sp1 X32 + Microsoft Windows Server 2008 R2 + Microsoft Windows Server 2003 Sp2 X64 + Microsoft Windows Server 2003 SP2 + Microsoft Windows Server 2003 Sp1 X64 + Microsoft Windows Server 2003 SP1 + Microsoft Windows Server 2008 R2 SP1 + Microsoft Windows Server 2008 for x64-based Systems SP2 + Microsoft Windows Server 2008 R2 x64 SP1 + Microsoft Windows Server 2008 R2 x64 0 + Microsoft Windows Server 2008 Standard Edition X64 + Microsoft Windows Server 2008 Standard Edition SP2 + Microsoft Windows Server 2008 Standard Edition 0 + Microsoft Windows Server 2008 Standard Edition - Sp2 Web + Microsoft Windows Vista SP2 + Microsoft Windows Vista SP1 + Microsoft Windows Vista Home Premium SP2 + Microsoft Windows Vista Home Premium SP1 + Microsoft Windows Vista Home Premium + Microsoft Windows Vista Home Basic SP2 + Microsoft Windows Vista Home Basic SP1 + Microsoft Windows Vista Home Basic + Microsoft Windows Vista Enterprise SP2 + Microsoft Windows Vista Enterprise SP1 + Microsoft Windows Vista Enterprise + Microsoft Windows Vista Business SP2 + Microsoft Windows Vista Business SP1 + Microsoft Windows Vista 0 + Microsoft Windows Vista Business 64-bit edition SP2 + Microsoft Windows Vista Business 64-bit edition SP1 + Microsoft Windows Vista Business 64-bit edition 0 + Microsoft Windows Vista Enterprise 64-bit edition SP2 + Microsoft Windows Vista Enterprise 64-bit edition SP1 + Microsoft Windows Vista Enterprise 64-bit edition 0 + Microsoft Windows Vista Home Basic 64-bit edition Sp2 X64 + Microsoft Windows Vista Home Basic 64-bit edition SP2 + Microsoft Windows Vista Home Basic 64-bit edition SP1 + Microsoft Windows Vista Home Basic 64-bit edition 0 + Microsoft Windows Vista Home Premium 64-bit edition SP2 + Microsoft Windows Vista Home Premium 64-bit edition SP1 + Microsoft Windows Vista Home Premium 64-bit edition 0 + Microsoft Windows XP 0 + Microsoft Windows XP Embedded SP3 + Microsoft Windows XP Embedded SP2 + Microsoft Windows XP Embedded SP1 + Microsoft Windows XP Embedded + Microsoft Windows XP Home SP3 + Microsoft Windows XP Home SP2 + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home + Microsoft Windows XP Media Center Edition SP3 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition SP1 + Microsoft Windows XP Professional SP3 + Microsoft Windows XP Professional SP2 + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Professional x64 Edition Microsoft Internet Explorer 6.0 + Microsoft Windows Server 2003 SP2 + Microsoft Windows Server 2003 Sp1 X64 + Microsoft Windows Server 2003 SP1 + Microsoft Windows XP 0 + Microsoft Windows XP - Gold Home + Microsoft Windows XP - Gold 64-Bit-2002 + Microsoft Windows XP Embedded SP3 + Microsoft Windows XP Embedded SP2 + Microsoft Windows XP Embedded SP1 + Microsoft Windows XP Embedded + Microsoft Windows XP Home SP3 + Microsoft Windows XP Home SP2 + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home + Microsoft Windows XP Media Center Edition SP3 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition SP1 + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Professional SP3 + Microsoft Windows XP Professional SP2 + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional + Microsoft Windows XP Professional x64 Edition SP3 + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Professional x64 Edition + Microsoft Windows XP Service Pack 3 0 + Microsoft Windows XP Tablet PC Edition SP3 + Microsoft Windows XP Tablet PC Edition SP2 + Microsoft Windows XP Tablet PC Edition SP1 + Microsoft Windows XP Tablet PC Edition Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 2.0 SP2
Not Vulnerable:

RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities

Microsoft has released advance notification that on May 14, 2013, they will be releasing ten security bulletins addressing multiple vulnerabilities.

The bulletins and their affected components are as follows:

Two bulletins rated 'Critical' affecting Microsoft Windows and Internet Explorer.

Eight bulletins rated 'Important' affecting Microsoft Windows, Microsoft .NET Framework, Microsoft Lync, Microsoft Office, and Microsoft Windows Essentials.

This BID is being retired. The following individual records exist to better document the issues:

59734 Microsoft Internet Explorer JSON Array CVE-2013-1297 Information Disclosure Vulnerability
59737 Microsoft Internet Explorer CVE-2013-0811 Use-After-Free Remote Code Execution Vulnerability
59745 Microsoft Internet Explorer CVE-2013-1306 Use-After-Free Remote Code Execution Vulnerability
59746 Microsoft Internet Explorer CVE-2013-1307 Use-After-Free Remote Code Execution Vulnerability
59747 Microsoft Internet Explorer CVE-2013-1308 Use-After-Free Remote Code Execution Vulnerability
59748 Microsoft Internet Explorer CVE-2013-1309 Use-After-Free Remote Code Execution Vulnerability
59751 Microsoft Internet Explorer CVE-2013-1310 Use-After-Free Remote Code Execution Vulnerability
59752 Microsoft Internet Explorer CVE-2013-1311 Use-After-Free Remote Code Execution Vulnerability
59753 Microsoft Internet Explorer CVE-2013-1312 Use-After-Free Remote Code Execution Vulnerability
59754 Microsoft Internet Explorer CVE-2013-1313 Use-After-Free Remote Code Execution Vulnerability
59755 Microsoft Internet Explorer CVE-2013-2551 Use-After-Free Remote Code Execution Vulnerability
59782 Microsoft Windows DirectX Graphics Kernel CVE-2013-1332 Local Privilege Escalation Vulnerability
59749 Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1333 Local Privilege Escalation Vulnerability
59750 Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1334 Local Privilege Escalation Vulnerability
59784 Microsoft Windows 'HTTP.sys' Remote Denial of Service Vulnerability
59789 Microsoft .NET Framework XML Digital Signature CVE-2013-1336 Security Bypass Vulnerability
59790 Microsoft .NET Framework CVE-2013-1337 Authentication Bypass Vulnerability
59791 Microsoft Lync CVE-2013-1302 Remote Code Execution Vulnerability
59761 Microsoft Publisher Negative Value Allocation CVE-2013-1316 Remote Code Execution Vulnerability
59762 Microsoft Publisher CVE-2013-1317 Remote Integer Overflow Vulnerability
59764 Microsoft Publisher CVE-2013-1318 Remote Code Execution Vulnerability
59766 Microsoft Publisher CVE-2013-1319 Remote Code Execution Vulnerability
59763 Microsoft Publisher CVE-2013-1320 Remote Buffer Overflow Vulnerability
59767 Microsoft Publisher CVE-2013-1321 Remote Code Execution Vulnerability
59768 Microsoft Publisher CVE-2013-1322 Remote Code Execution Vulnerability
59769 Microsoft Publisher CVE-2013-1323 Remote Code Execution Vulnerability
59770 Microsoft Publisher CVE-2013-1327 Remote Code Execution Vulnerability
59771 Microsoft Publisher CVE-2013-1328 Remote Code Execution Vulnerability
59772 Microsoft Publisher CVE-2013-1329 Remote Code Execution Vulnerability
59759 Microsoft Word CVE-2013-1335 Remote Code Execution Vulnerability
59765 Microsoft Visio CVE-2013-1301 Information Disclosure Vulnerability
59783 Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
59641 Microsoft Internet Explorer CVE-2013-1347 Use-After-Free Remote Code Execution Vulnerability

RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft May 2013 Advance Notification Multiple Vulnerabilities

Solution:
Microsoft plans to release fixes to address these issues on May 14, 2013.

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft May 2013 Advance Notification Multiple Vulnerabilities

References:

• Microsoft Homepage (Microsoft)