Microsoft Patch Tuesday June 2024

 Microsoft Patch Tuesday June 2024

Microsoft has released vulnerabilities for multiple products  

Date :Jun14,2024

Description
CVE	Disclosed	Exploited	Severity	CVSS Base (AVG)	CVSS Temporal (AVG)
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
CVE-2024-35255	No	No	Important	5.5	4.8
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-35254	No	No	Important	7.1	6.2
Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
CVE-2024-37325	No	No	Important	8.1	7.3
Azure Storage Movement Client Library Denial of Service Vulnerability
CVE-2024-35252	No	No	Important	7.5	6.5
Chromium: CVE-2024-5493 Heap buffer overflow in WebRTC
CVE-2024-5493	No	No	-
Chromium: CVE-2024-5494 Use after free in Dawn
CVE-2024-5494	No	No	-
Chromium: CVE-2024-5495 Use after free in Dawn
CVE-2024-5495	No	No	-
Chromium: CVE-2024-5496 Use after free in Media Session
CVE-2024-5496	No	No	-
Chromium: CVE-2024-5497 Out of bounds memory access in Keyboard Inputs
CVE-2024-5497	No	No	-
Chromium: CVE-2024-5498 Use after free in Presentation API
CVE-2024-5498	No	No	-
Chromium: CVE-2024-5499 Out of bounds write in Streams API
CVE-2024-5499	No	No	-
DHCP Server Service Denial of Service Vulnerability
CVE-2024-30070	No	No	Important	7.5	6.7
GitHub: CVE-2024-29187 WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
CVE-2024-29187	No	No	Important	7.3	6.4
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU
CVE-2023-50868	Yes	No	Important	7.5	6.5
Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVE-2024-35253	No	No	Important	4.4	4.2
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2024-35263	No	No	Important	5.7	5
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-35248	No	No	Important	7.3	6.4
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVE-2024-35249	No	No	Important	8.8	7.7
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
CVE-2024-30072	No	No	Important	7.8	6.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-30080	No	No	Critical	9.8	8.5
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30101	No	No	Important	7.5	6.5
CVE-2024-30102	No	No	Important	7.3	6.4
CVE-2024-30104	No	No	Important	7.8	6.8
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-30103	No	No	Important	8.8	7.7
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-30100	No	No	Important	7.8	6.8
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-30097	No	No	Important	8.8	7.7
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-30089	No	No	Important	7.8	6.8
CVE-2024-30090	No	No	Important	7	6.1
Visual Studio Elevation of Privilege Vulnerability
CVE-2024-29060	No	No	Important	6.7	5.8
Visual Studio Remote Code Execution Vulnerability
CVE-2024-30052	No	No	Important	4.7	4.1
Win32k Elevation of Privilege Vulnerability
CVE-2024-30082	No	No	Important	7.8	6.8
CVE-2024-30087	No	No	Important	7.8	6.8
CVE-2024-30091	No	No	Important	7.8	7
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-30085	No	No	Important	7.8	7
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2024-30076	No	No	Important	6.8	5.9
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-30096	No	No	Important	5.5	4.8
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2024-30063	No	No	Important	6.7	5.8
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30064	No	No	Important	8.8	7.7
CVE-2024-30068	No	No	Important	8.8	7.7
CVE-2024-30088	No	No	Important	7	6.3
CVE-2024-30099	No	No	Important	7	6.3
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-35250	No	No	Important	7.8	6.8
CVE-2024-30084	No	No	Important	7	6.1
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2024-30074	No	No	Important	8	7.2
CVE-2024-30075	No	No	Important	8	7
Windows OLE Remote Code Execution Vulnerability
CVE-2024-30077	No	No	Important	8	7
Windows Perception Service Elevation of Privilege Vulnerability
CVE-2024-35265	No	No	Important	7	6.1
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30069	No	No	Important	4.7	4.1
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30094	No	No	Important	7.8	6.8
CVE-2024-30095	No	No	Important	7.8	6.8
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
CVE-2024-30083	No	No	Important	7.5	6.5
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
CVE-2024-30062	No	No	Important	7.8	7
Windows Storage Elevation of Privilege Vulnerability
CVE-2024-30093	No	No	Important	7.3	6.4
Windows Themes Denial of Service Vulnerability
CVE-2024-30065	No	No	Important	5.5	4.8
Windows Wi-Fi Driver Remote Code Execution Vulnerability
CVE-2024-30078	No	No	Important	8.8	7.7
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2024-30086	No	No	Important	7.8	6.8
Winlogon Elevation of Privilege Vulnerability
CVE-2024-30066	No	No	Important	5.5	4.8
CVE-2024-30067	No	No	Important	5.5	4.8

 

Original Advisory

Microsoft

https://msrc.microsoft.com/update-guide/vulnerability

NOTE:The Information provided is on "as is" basis, without assurance of any kind.

Read More

Denial of service vulnerability in Visual Studio.Net

Microsoft Security Advisory CVE-2023-38180: .NET Denial of Service Vulnerability

Date: 16-Aug-23
Severity: Medium

Affected software

• Any .NET 7.0 application running on .NET 7.0.8 or earlier.
• Any .NET 6.0 application running on .NET 6.0.19 or earlier.

Description

Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 2.1, .NET 6.0, and .NET 7.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in Kestrel where, on detecting a potentially malicious client, Kestrel will sometimes fail to disconnect it, resulting in denial of service.

Solution

Apply workarounds at

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180

Original Advisory

Microsoft:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180     

 NOTE : The information is provide is on “as is “ basis, without assurance of any kind.

Read More

Cisco Security Service File Verification Bypass Could Allow Elevation of Privilege

Cisco Security Service File Verification Bypass Could Allow Elevation of Privilege

Published: June 18, 2013

Version: 1.0

Severity :High

Affected Software
·       Cisco AnyConnect VPN Client version 3.1.00495 and earlier versions
·       Cisco AnyConnect Secure Mobility Client version 3.1.00495 and earlier versions
Non-Affected Software
·       Cisco AnyConnect VPN Client version 3.1.01065
·       Cisco AnyConnect Secure Mobility Client version 3.1.01065

Overview

Executive Summary

Microsoft is providing notification of the discovery and remediation of a vulnerability in the Cisco Host Scan component of Cisco AnyConnect Secure Mobility and Cisco Secure Desktop software. The vulnerability affects the Host Scan component included in Cisco AnyConnect VPN Client and Cisco AnyConnect Secure Mobility Client software (version 3.1.00495 and earlier versions). Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Cisco Systems, Inc. Cisco has remediated the vulnerability in their software.

A vulnerability exists in the way that the Cisco Security Service component (in Cisco Host Scan) handles messages for file manipulation. A user running as a standard user account who successfully exploited this vulnerability could gain elevated privileges and run arbitrary code in the security context of the system account.

Microsoft Vulnerability Research reported this issue to and coordinated with Cisco to ensure remediation of this issue. The vulnerability has been assigned the entry, CVE-2013-1172, in the Common Vulnerabilities and Exposures list. For more information, see the Cisco Security Notice: Cisco Host Scan Privilege Elevation Vulnerability.

Mitigating Factors

• For an attack to be successful, Host Scan functionality must be enabled.
• An attacker must have valid logon credentials and be able to log on to exploit this vulnerability.

Advisory Details

Purpose and Recommendation

To notify users of a vulnerability and its remediation.

Review the Suggested Actions section and configure as appropriate.

CVE Details:

CVE-2013-1172

Suggested Actions

Upgrade to the latest version of the affected products.

 

NOTE:The Information provided is on "as is" basis, without assurance of any kind

Read More

Microsoft Office Defense in Depth Update

Microsoft Office Defense in Depth Update

Date :08-Aug-23
Severity: Medium

Affected Software

• Microsoft Word 2013 Service Pack 1 (64-bit editions)
• Microsoft Word 2013 Service Pack 1 (32-bit editions)
• Microsoft Word 2013 RT Service Pack 1
• Microsoft Publisher 2013 Service Pack 1 (64-bit editions)
• Microsoft Publisher 2013 Service Pack 1 (32-bit editions)
• Microsoft Office 2013 Service Pack 1 (64-bit editions)
• Microsoft Office 2013 Service Pack 1 (32-bit editions)
• Microsoft Office 2013 RT Service Pack 1
• Microsoft Excel 2013 Service Pack 1 (64-bit editions)
• Microsoft Excel 2013 Service Pack 1 (32-bit editions)
• Microsoft Excel 2013 RT Service Pack 1
• Microsoft Project 2016 (64-bit edition)
• Microsoft Project 2016 (32-bit edition)
• Microsoft Publisher 2016 (64-bit edition)
• Microsoft Publisher 2016 (32-bit edition)
• Microsoft Word 2016 (64-bit edition)
• Microsoft Word 2016 (32-bit edition)
• Microsoft Visio 2016 (64-bit edition)
• Microsoft Visio 2016 (32-bit edition)
• Microsoft PowerPoint 2016 (64-bit edition)
• Microsoft PowerPoint 2016 (32-bit edition)
• Microsoft Office 2016 (64-bit edition)
• Microsoft Office 2016 (32-bit edition)
• Microsoft Excel 2016 (64-bit edition)
• Microsoft Excel 2016 (32-bit edition)
• Microsoft Visio 2013 Service Pack 1 (64-bit editions)
• Microsoft Visio 2013 Service Pack 1 (32-bit editions)
• Microsoft PowerPoint 2013 RT Service Pack 1
• Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)
• Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)
• Microsoft Office LTSC 2021 for 32-bit editions
• Microsoft Office LTSC 2021 for 64-bit editions
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft Publisher 2013 Service Pack 1 RT
• Microsoft Office 2019 for 64-bit editions
• Microsoft Office 2019 for 32-bit editions
• Microsoft Project 2013 Service Pack 1 (64-bit editions)
• Microsoft Project 2013 Service Pack 1 (32-bit editions)

Description

CVE-2023-36873 - .NET Framework Spoofing Vulnerability:In this vulnerability where unauthenticated remote attacker can sign ClickOnce deployments without a valid code signing certificate.
CVE-2023-36899 - .NET Framework Remote Code Execution Vulnerability: In this vulnerability in applications on IIS using their parent application’s Application Pool which can lead to privilege escalation or other security bypasses.

Solutions
Original Advisory
https://support.microsoft.com/en-us/topic/august-8-2023-security-and-quality-rollup-for-net-framework-2-0-3-0-4-6-2-for-windows-server-2008-sp2-kb5029654-5574aadb-26e5-4b11-84d1-c6c4c02ce0f3
 
Microsoft:
https://support.microsoft.com/en-us/topic/august-8-2023-security-and-quality-rollup-for-net-framework-2-0-3-0-4-6-2-for-windows-server-2008-sp2-kb5029654-5574aadb-26e5-4b11-84d1-c6c4c02ce0f3

NOTE : The information is provide is on “as is “ basis, without assurance of any kind.
 
 
 

Read More

Microsoft Exchange Server Oracle Outside In Technology Multiple Vulnerabilities

Microsoft has reported multiple vulnerabilities in Microsoft Exchange Server, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

The vulnerabilities exist in the bundled version of Oracle Outside In Technology libraries

Release Date    2012-07-25    

   

Severity :High  

·           Impact

·                  DoS

·                  System access

·                  Authentication level      

                       

Systems affected    

     

 ·           Microsoft Exchange Server 2007

·            Microsoft Exchange Server 2010

·

CVE Reference(s)  

      

CVE-2012-1766

CVE-2012-1767

CVE-2012-1768

CVE-2012-1769

CVE-2012-1770

CVE-2012-1771

CVE-2012-1772

CVE-2012-1773

CVE-2012-3106

CVE-2012-3107

CVE-2012-3108

CVE-2012-3109

CVE-2012-3110

                       

Description

The vulnerabilities exist in the way that the Oracle Outside In libraries parse specially crafted files.

An attacker who successfully exploited these vulnerabilities could run arbitrary code under the process that is performing the parsing of this specially crafted files to a site that is using FAST Search to index. When the FAST Search index parses the specially crafted file, arbitrary code is run in the context of a user with a restricted token.

Solution

Apply workarounds at
http://technet.microsoft.com/en-us/security/advisory/2737111

Original Advisory

Microsoft:

http://technet.microsoft.com/en-us/security/advisory/2737111     

 NOTE : The information is provide is on “as is “ basis, without assurance of any kind.

Read More