RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
BID:64757
Info
RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
| Bugtraq ID: | 64757 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 09 2014 12:00AM |
| Updated: | Jan 20 2014 12:13PM |
| Credit: | Microsoft |
| Vulnerable: |
Microsoft Word Viewer 0 Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium Sp2 Itanium Microsoft Windows Server 2003 SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft SharePoint Server 2010 SP1 Microsoft Office Web Apps 2010 SP1 Microsoft Office 2010 (64-bit edition) SP1 Microsoft Office 2010 (32-bit edition) SP1 Microsoft Office 2007 SP3 Microsoft Office 2003 SP3 |
| Not Vulnerable: | |
Discussion
RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
Microsoft has released advance notification that on January 14, 2014, they will be releasing four security bulletins addressing multiple vulnerabilities.
The bulletins and their affected components are as follows:
Four bulletins rated 'Important' affecting Microsoft Windows, Office, and Dynamics AX.
This BID is being retired. The following individual records exist to better document the issues:
63971 Microsoft Windows Kernel 'NDProxy.sys' Local Privilege Escalation Vulnerability
64725 Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0262 Local Privilege Escalation Vulnerability
64724 Microsoft Dynamics AX CVE-2014-0261 Remote Denial of Service Vulnerability
64728 Microsoft Office Word File Processing CVE-2014-0260 Remote Code Execution Vulnerability
64727 Microsoft Office Word File Processing CVE-2014-0259 Remote Code Execution Vulnerability
64726 Microsoft Office Word File Processing CVE-2014-0258 Remote Code Execution Vulnerability
Microsoft has released advance notification that on January 14, 2014, they will be releasing four security bulletins addressing multiple vulnerabilities.
The bulletins and their affected components are as follows:
Four bulletins rated 'Important' affecting Microsoft Windows, Office, and Dynamics AX.
This BID is being retired. The following individual records exist to better document the issues:
63971 Microsoft Windows Kernel 'NDProxy.sys' Local Privilege Escalation Vulnerability
64725 Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0262 Local Privilege Escalation Vulnerability
64724 Microsoft Dynamics AX CVE-2014-0261 Remote Denial of Service Vulnerability
64728 Microsoft Office Word File Processing CVE-2014-0260 Remote Code Execution Vulnerability
64727 Microsoft Office Word File Processing CVE-2014-0259 Remote Code Execution Vulnerability
64726 Microsoft Office Word File Processing CVE-2014-0258 Remote Code Execution Vulnerability
Exploit / POC
RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
Solution:
Microsoft plans to release fixes to address these issues on January 14, 2014.
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Microsoft plans to release fixes to address these issues on January 14, 2014.
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: Microsoft January 2014 Advance Notification Multiple Vulnerabilities
References:
References:
- Microsoft Homepage (Microsoft)