Microsoft Security Bulletin Coverage (Oct 8, 2013)

Dell SonicWALL has analyzed and addressed Microsoft's security advisories for the month of October, 2013. A list of issues reported, along with Dell SonicWALL coverage information follows:

MS13-080 Cumulative Security Update for Internet Explorer (2879017)

• CVE-2013-3872 Internet Explorer Memory Corruption Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3873 Internet Explorer Memory Corruption Vulnerability
  IPS: 7548 "Windows IE Use-After-Free Vulnerability (MS13-080) 2"
• CVE-2013-3874 Internet Explorer Memory Corruption Vulnerability
  IPS: 7549 "Windows IE Use-After-Free Vulnerability (MS13-080) 3"
• CVE-2013-3875 Internet Explorer Memory Corruption Vulnerability
  IPS: 7550 "Windows IE Use-After-Free Vulnerability (MS13-080) 4"
• CVE-2013-3882 Internet Explorer Memory Corruption Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3885 Internet Explorer Memory Corruption Vulnerability
  IPS: 7551 "Windows IE Use-After-Free Vulnerability (MS13-080) 5"
• CVE-2013-3886 Internet Explorer Memory Corruption Vulnerability
  IPS: 7552 "Windows IE Use-After-Free Vulnerability (MS13-080) 6"
• CVE-2013-3893 Internet Explorer Memory Corruption Vulnerability
  IPS: 7377 "Windows IE Memory Corruption Vulnerability"
  IPS: 7417 "Windows IE Memory Corruption Vulnerability 2"
  SPY: 4119 "Malformed-File html.TL.274"
• CVE-2013-3897 Internet Explorer Memory Corruption Vulnerability
  Please check Analysis for more details on the exploit seen in the wild.
  IPS: 7553 "Windows IE Use-After-Free Vulnerability (MS13-080) 7"
  SPY: 4684 "CVE-2013-3897"

MS13-081 Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2870008)

• CVE-2013-3894 TrueType Font CMAP Table Vulnerability Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3888 DirectX Graphics Kernel Subsystem Double Fetch Vulnerability Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3881 Win32k NULL Page Vulnerability
  This is a local vulnerability.
• CVE-2013-3880 App Container Elevation of Privilege Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3879 Win32k Use After Free Vulnerability
  This is a local vulnerability.
• CVE-2013-3200 Windows USB Descriptor Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3128 Open Type Font Parsing Vulnerability
  SPY: 4683 "Malformed-File otf.MP.9"

MS13-082 Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2878890)

• CVE-2013-3861 JSON Parsing Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3860 Entity Expansion Vulnerability
  IPS: 6316 "Microsoft .NET Framework Entity Expansion DoS"
• CVE-2013-3128 OpenType Font Parsing Vulnerability
  SPY: 4683 "Malformed-File otf.MP.9"

MS13-083 Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058)

• CVE-2013-3195 Comctl32 Integer Overflow Vulnerability
  SPY: 4685 "Malformed-File exe.MP.7"

MS13-084 Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)

• CVE-2013-3895 Parameter Injection Vulnerability
  IPS: 7555 "Microsoft SharePoint Server Remote Code Execution 4 (MS13-084)"
• CVE-2013-3889 MIcrosoft Excel Memory Corruption Vulnerability
  There are no known exploits in the wild.

MS13-085 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)

• CVE-2013-3890 Microsoft Excel Memory Corruption Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3889 Microsoft Excel Memory Corruption Vulnerability
  There are no known exploits in the wild.

MS13-086 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084)

• CVE-2013-3892 Memory Corruption Vulnerability
  There are no known exploits in the wild.
• CVE-2013-3891 Memory Corruption Vulnerability
  SPY: 4686 "Malformed-File doc.MP.14"

MS13-087 Vulnerability in Silverlight Could Allow Information Disclosure (2890788)

• CVE-2013-3896 Silverlight Vulnerability
  There are no known exploits in the wild.