Microsoft security alert.

Advisory overview

Qualys Vulnerability R&D Lab has released new vulnerability checks in the Enterprise TruRisk Platform to protect organizations against 6 vulnerabilities that were fixed in 4 bulletins announced today by Microsoft. Customers can immediately audit their networks for these and other new vulnerabilities by accessing their Qualys subscription. Visit Qualys Security Blog to prioritize remediation.

Non-Qualys customers can audit their network for these and other vulnerabilities by signing up for a Qualys Free Trial, or by trying Qualys Community Edition.

Vulnerability details

Microsoft has released 4 security bulletins to fix newly discovered flaws in their software. Qualys has released the following checks for these new vulnerabilities:

• Microsoft Windows Kernel Elevation of Privilege Vulnerability (MS14-002)

  Severity

  Serious 3

  Qualys ID

  90926

  Vendor Reference

  MS14-002

  CVE Reference

  CVE-2013-5065

  CVSS Scores

  Base 7.2 / Temporal 6.3

  Description

  The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling.

  An elevation of privilege vulnerability exists in the NDProxy component of the Windows kernel due to improper validation of input passed from user mode to the kernel.

  Affected Versions:
  Windows XP Service Pack 3
  Windows XP Professional x64 Edition Service Pack 2
  Windows Server 2003 Service Pack 2
  Windows Server 2003 x64 Edition Service Pack 2
  Windows Server 2003 with SP2 for Itanium-based Systems
  

  This security update is rated Important for all supported editions of Windows XP and Windows Server 2003.

  Consequence

  Successful exploitation of these vulnerabilities could allow a local attacker to execute arbitrary code in kernel mode with elevated privileges.

  Solution

  Refer to MS14-002 for further information.

  Patches:
  The following are links for downloading patches to fix these vulnerabilities:
  MS14-002 Windows Server 2003 Service Pack 2
  MS14-002 Windows Server 2003 with SP2 for Itanium-based Systems
  MS14-002 Windows Server 2003 x64 Edition Service Pack 2
  MS14-002 Windows XP Professional x64 Edition Service Pack 2
  MS14-002 Windows XP Service Pack 3

• Microsoft Word and Office Web Apps Remote Code Execution Vulnerability (MS14-001)

  Severity

  Urgent 5

  Qualys ID

  110233

  Vendor Reference

  MS14-001

  CVE Reference

  CVE-2014-0258, CVE-2014-0259, CVE-2014-0260

  CVSS Scores

  Base 9.3 / Temporal 6.9

  Description

  A remote code execution vulnerability exists in the way that affected Microsoft Word and Office Web Apps parse content in specially crafted pages.

  Affected Software:
  Microsoft Office 2003 Service Pack 3
  Microsoft Office 2007 Service Pack 3
  Microsoft Office 2010
  Microsoft Office 2013 and Microsoft Office 2013 RT
  Microsoft Office Compatibility Pack Service Pack 3
  Microsoft Word Viewer
  Microsoft SharePoint Server 2010 (Word Automation Services)
  Microsoft SharePoint Server 2013 (Word Automation Services)
  Microsoft Office Web Apps 2010
  Microsoft Office Web Apps 2013.

  This update is rated Important for all of the above affected software.

  Consequence

  Successful exploitation of this issue will allow a remote attacker to execute arbitrary code in the context of logged in user using affected version of the software and possible gain privileges of the logged in user. Failed exploits may result in denial of service.

  Solution

  Customers are advised to refer to MS14-001.

  Patches:
  The following are links for downloading patches to fix these vulnerabilities:
  MS14-001 Microsoft Office 2003 Service Pack 3(Microsoft Word 2003 Service Pack 3)
  MS14-001 Microsoft Office 2007 Service Pack 3(Microsoft Word 2007 Service Pack 3)
  MS14-001 Microsoft Office 2010 Service Pack 1 (32-bit editions)(Microsoft Word 2010 Service Pack 1 (32-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 1 (32-bit editions)(Microsoft Word 2010 Service Pack 1 (32-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 1 (64-bit editions)(Microsoft Word 2010 Service Pack 1 (64-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 1 (64-bit editions)(Microsoft Word 2010 Service Pack 1 (64-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 2 (32-bit editions)(Microsoft Word 2010 Service Pack 2 (32-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 2 (32-bit editions)(Microsoft Word 2010 Service Pack 2 (32-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 2 (64-bit editions)(Microsoft Word 2010 Service Pack 2 (64-bit editions))
  MS14-001 Microsoft Office 2010 Service Pack 2 (64-bit editions)(Microsoft Word 2010 Service Pack 2 (64-bit editions))
  MS14-001 Microsoft Office 2013 (32-bit editions)(Microsoft Word 2013 (32-bit editions))
  MS14-001 Microsoft Office 2013 (32-bit editions)(Microsoft Word 2013 (32-bit editions))
  MS14-001 Microsoft Office 2013 (64-bit editions)(Microsoft Word 2013 (64-bit editions))
  MS14-001 Microsoft Office 2013 (64-bit editions)(Microsoft Word 2013 (64-bit editions))
  MS14-001 Microsoft Office Compatibility Pack Service Pack 3
  MS14-001 Microsoft Office Web Apps 2010 Service Pack 1(Microsoft Web Applications 2010 Service Pack 1)
  MS14-001 Microsoft Office Web Apps 2010 Service Pack 2(Microsoft Web Applications 2010 Service Pack 2)
  MS14-001 Microsoft Office Web Apps 2013(Microsoft Office Web Apps Server 2013)
  MS14-001 Microsoft SharePoint Server 2010 Service Pack 1(Word Automation Services)
  MS14-001 Microsoft SharePoint Server 2010 Service Pack 2(Word Automation Services)
  MS14-001 Microsoft SharePoint Server 2013(Word Automation Services)
  MS14-001 Microsoft Word Viewer

• Microsoft Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (MS14-003)

  Severity

  Urgent 5

  Qualys ID

  90936

  Vendor Reference

  MS14-003

  CVE Reference

  CVE-2014-0262

  CVSS Scores

  Base 7.2 / Temporal 5.3

  Description

  The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling.

  An elevation of privilege vulnerability exists in the Microsoft Windows kernel. This vulnerability occurs when the Windows kernel improperly handles thread-owned objects in memory. (CVE-2014-0262)

  Affected Software:
  Windows 7 for 32-bit Systems Service Pack 1
  Windows 7 for x64-based Systems Service Pack 1
  Windows Server 2008 R2 for x64-based Systems Service Pack 1
  Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

  This security update is rated Important for all supported editions of Windows 7 and Windows Server 2008 R2.

  Consequence

  An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.

  Solution

  Refer to MS14-003 for further information.

  Patches:
  The following are links for downloading patches to fix these vulnerabilities:
  MS14-003 Windows 7 for 32-bit Systems Service Pack 1
  MS14-003 Windows 7 for x64-based Systems Service Pack 1
  MS14-003 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  MS14-003 Windows Server 2008 R2 for x64-based Systems Service Pack 1
  MS14-003 Windows Server 2008 R2 for x64-based Systems Service Pack 1 - Server Core

• Microsoft Dynamics AX Query Filter Denial of Service Vulnerability (MS14-004)

  Severity

  Critical 4

  Qualys ID

  90937

  Vendor Reference

  MS14-004

  CVE Reference

  CVE-2014-0261

  CVSS Scores

  Base 4 / Temporal 3

  Description

  Microsoft Dynamics AX is an is a multi-language, multi-currency enterprise resource planning (ERP) solution, and part of the Microsoft Dynamics family.

  The vulnerability could allow a denial of service if an authenticated attacker submits specially crafted data to an affected Microsoft Dynamics AX Application Object Server (AOS) instance.

  To exploit this vulnerability, an attacker must be able to authenticate on the Microsoft Dynamics AX client.

  This security update is rated Important for all supported editions of Microsoft Dynamics AX 4.0, Microsoft Dynamics AX 2009, Microsoft Dynamics AX 2012, and Microsoft Dynamics AX 2012 R2.

  Affected Software:
  Microsoft Dynamics AX 4.0 Service Pack 2
  Microsoft Dynamics AX 2009 Service Pack 1
  Microsoft Dynamics AX 2012
  Microsoft Dynamics AX 2012 R2

  Consequence

  An remote authenticated attacker who successfully exploited this vulnerability could cause the target AOS instance to stop responding to client requests, leading to a DoS.

  Solution

  Customers are advised to visit MS14-004 for more information.

  Patches:
  The following are links for downloading patches to fix these vulnerabilities:
  MS14-004 Microsoft Dynamics AX 2009 Service Pack 1
  MS14-004 Microsoft Dynamics AX 2012
  MS14-004 Microsoft Dynamics AX 2012 R2
  MS14-004 Microsoft Dynamics AX 4.0 Service Pack 2

Access for Qualys Customers

Platforms and Platform Identification

Technical Support

For more information, customers may contact Qualys Technical Support.

About Qualys

The Enterprise TruRisk Platform and its integrated suite of security and compliance applications provides organizations of all sizes with a global view of their security and compliance solutions, while drastically reducing their total cost of ownership. Qualys solutions include: continuous monitoring, vulnerability management, policy compliance, PCI compliance, security assessment questionnaire, web application scanning, web application firewall, malware detection and SECURE Seal for security testing of web sites.