Microsoft Security Bulletin Coverage

August 13, 2013

Dell SonicWALL has analyzed and addressed Microsoft's security advisories for the month of August, 2013. A list of issues reported, along with Dell SonicWALL coverage information follows:

MS13-059 Cumulative Security Update for Internet Explorer (2862772)

  • CVE-2013-3184 Internet Explorer Memory Corruption Vulnerability
    IPS: 6020 "Windows IE Use-After-Free Vulnerability (MS13-059) 3"
  • CVE-2013-3186 Internet Explorer Process Integrity Level Assignment Vulnerability
    There are no known exploits in the wild.
  • CVE-2013-3187 Internet Explorer Memory Corruption Vulnerability
    IPS: 6023 "Windows IE Use-After-Free Vulnerability (MS13-059) 7"
  • CVE-2013-3188 Internet Explorer Memory Corruption Vulnerability
    IPS: 7026 "Windows IE Use-After-Free Vulnerability (MS13-059) 1"
  • CVE-2013-3189 Internet Explorer Memory Corruption Vulnerability
    IPS: 7027 "Windows IE Type Confusion Vulnerability (MS13-059)"
  • CVE-2013-3190 Internet Explorer Memory Corruption Vulnerability
    There are no known exploits in the wild.
  • CVE-2013-3191 Internet Explorer Memory Corruption Vulnerability
    IPS: 7029 "Windows IE Use-After-Free Vulnerability (MS13-059) 2"
  • CVE-2013-3192 EUC-JP Character Encoding Vulnerability
    There are no known exploits in the wild.
  • CVE-2013-3193 Internet Explorer Memory Corruption Vulnerability
    IPS: 7060 "Windows IE Use-After-Free Vulnerability (MS13-059) 4"
  • CVE-2013-3194 Internet Explorer Memory Corruption Vulnerability
    IPS: 7061 "Windows IE Use-After-Free Vulnerability (MS13-059) 5"
  • CVE-2013-3199 Internet Explorer Memory Corruption Vulnerability
    IPS: 7062 "Windows IE Use-After-Free Vulnerability (MS13-059) 6"

MS13-060 Vulnerability in Unicode Scripts Processor Could Allow Remote Code Execution (2850869)

  • CVE-2013-3181 Uniscribe Font Parsing Engine Memory Corruption Vulnerability
    There are no known exploits in the wild.

MS13-061 Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2876063)

  • CVE-2013-2393 Oracle Outside In Contains Multiple Exploitable Vulnerabilities
    There are no known exploits in the wild.
  • CVE-2013-3776 Oracle Outside In Contains Multiple Exploitable Vulnerabilities
    There are no known exploits in the wild.
  • CVE-2013-3781 Oracle Outside In Contains Multiple Exploitable Vulnerabilities
    There are no known exploits in the wild.

MS13-062 Vulnerability in Remote Procedure Call Could Allow Elevation of Privilege (2849470)

  • CVE-2013-3175 Remote Procedure Call Vulnerability
    Cannot reproduct the attack.

MS13-063 Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2859537)

  • CVE-2013-2556 ASLR Security Feature Bypass Vulnerability
    There are no known exploits in the wild.
  • CVE-2013-3196 Windows Kernel Memory Corruption Vulnerability
    This is a local vulnerability. Detection of attack over the wire is not feasible.
  • CVE-2013-3197 Windows Kernel Memory Corruption Vulnerability
    This is a local vulnerability. Detection of attack over the wire is not feasible.
  • CVE-2013-3198 Windows Kernel Memory Corruption Vulnerability
    This is a local vulnerability. Detection of attack over the wire is not feasible.

MS13-064 Vulnerability in Windows NAT Driver Could Allow Denial of Service (2849568)

  • CVE-2013-3182 Windows NAT Denial of Service Vulnerability
    There are no known exploits in the wild.

MS13-065 Vulnerability in ICMPv6 could allow Denial of Service (2868623)

  • CVE-2013-3183 ICMPv6 Vulnerability
    There are no known exploits in the wild.

MS13-066 Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (2873872)

  • CVE-2013-3185 AD FS Information Disclosure Vulnerability
    There are no known exploits in the wild.