[SECURITY-L] CAIS-Alerta: Atualizacao de Seguranca para ActiveX (MS08-032)

Qui Jun 12 09:40:25 -03 2008

----- Forwarded message from Centro de Atendimento a Incidentes de Seguranca <cais em cais.rnp.br> -----

From: Centro de Atendimento a Incidentes de Seguranca <cais em cais.rnp.br>
Subject:  CAIS-Alerta: Atualizacao de Seguranca para ActiveX (MS08-032)
To: pop-seg em cais.rnp.br, rnp-alerta em cais.rnp.br, rnp-seg em cais.rnp.br
Date: Wed, 11 Jun 2008 11:47:53 -0300 (BRT)

-----BEGIN PGP SIGNED MESSAGE-----

Prezados,

O CAIS esta' repassando o alerta da Microsoft, intitulado "MS08-032 - 
Cumulative Security Update of ActiveX Kill Bits (950760)", que trata de 
uma atualizacao de seguranca para um controle ActiveX e aplicacao de 
"kill-bit" para um controle ActiveX de terceiros.

Existe uma vulnerabilidade remota no componente de voz "sapi.dll", que se 
explorada, pode permitir ao atacante executar codigo malicioso no sistema 
vulneravel. Para ser explorada a vulnerabilidade e' necessario que o 
sistema de voz esteja habilitado.

Se explorada, a vulnerabilidade permite ao atacante obter as mesmas 
permissoes de acesso do usuario conectado. Se este usuario tiver 
permissoes de administrador, o atacante podera obter o controle total 
sobre o sistema.

A atualizacao desabilita, atraves da ativacao de um "kill-bit" 
(modificacao no registro), o funcionamento do controle ActiveX "BackWeb 
LiteInstactivator" no Internet Explorer. Este controle contem uma 
vulnerabilidade reportada pelo fabricante.

Sistemas afetados:

. Microsoft Windows 2000 Service Pack 4
. Windows XP Service Pack 2
. Windows XP Service Pack 3
. Windows XP Professional x64 Edition
. Windows XP Professional x64 Edition Service Pack 2
. Windows Server 2003 Service Pack 1
. Windows Server 2003 Service Pack 2
. Windows Server 2003 x64 Edition
. Windows Server 2003 x64 Edition Service Pack 2
. Windows Server 2003 com SP1 para sistemas baseados em Itanium
. Windows Server 2003 com SP2 para sistemas baseados em Itanium
. Windows Vista
. Windows Vista Service Pack 1
. Windows Vista x64 Edition
. Windows Vista x64 Edition Service Pack 1
. Windows Server 2008 para sistemas 32-bit
. Windows Server 2008 para sistemas x64
. Windows Server 2008 para sistemas baseados em Itanium

Correcoes disponiveis:

Recomenda-se fazer a atualizacao para as versoes disponiveis em :

. Microsoft Windows 2000 Service Pack 4
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CEDFD988-232C-4CBA-AC65-BEB54B8946E0

. Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2D8957C2-E473-4DCA-8D68-19FDAEA36E26

. Windows XP Service Pack 3
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2D8957C2-E473-4DCA-8D68-19FDAEA36E26

. Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=62874096-7D17-4116-9795-4756E2FB6DAE

. Windows XP Professional x64 Edition Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=62874096-7D17-4116-9795-4756E2FB6DAE

. Windows Server 2003 Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DADEAD99-09CB-4F2B-850D-E98A627CB9F8

. Windows Server 2003 Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DADEAD99-09CB-4F2B-850D-E98A627CB9F8

. Windows Server 2003 x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=84F9B533-B0CB-46D1-B4A8-5C9469ABBD22

. Windows Server 2003 x64 Edition Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=84F9B533-B0CB-46D1-B4A8-5C9469ABBD22

. Windows Server 2003 com SP1 para sistemas baseados em Itanium
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AC35CE19-D761-4529-9F55-1E1B5B2447AD

. Windows Server 2003 com SP2 para sistemas baseados em Itanium
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AC35CE19-D761-4529-9F55-1E1B5B2447AD

. Windows Vista
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4AF6575E-B061-45A6-B3D8-ECB32D76B2D3

. Windows Vista Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4AF6575E-B061-45A6-B3D8-ECB32D76B2D3

. Windows Vista x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=67576ACB-9CB6-4C76-9A72-DC5E5556B658

. Windows Vista x64 Edition Service Pack 1
  http://www.microsoft.com/downloads/details.aspx?FamilyId=67576ACB-9CB6-4C76-9A72-DC5E5556B658

. Windows Server 2008 para sistemas 32-bit
  http://www.microsoft.com/downloads/details.aspx?FamilyId=8A507FBA-8C93-4952-91E4-98E9E7AFFBD2

. Windows Server 2008 para sistemas x64
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1A11499D-A008-407F-9084-A5189FA27015

. Windows Server 2008 para sistemas baseados em Itanium
  http://www.microsoft.com/downloads/details.aspx?FamilyId=59B1689C-E723-4D87-973E-4BEAC107A6F7

Mais informacoes:

. MS08-032 - Security Update of ActiveX Kill Bits (950760)
  http://www.microsoft.com/technet/security/Bulletin/MS08-032.mspx

. SANS ISC Handler's Diary 2008-06-10: June 2008 Black Tuesday Overview
  http://isc.sans.org/diary.html?storyid=4552

. Microsoft Brasil Security
  http://www.microsoft.com/brasil/security

. Technet Brasil - Central de Seguranca
  http://www.technetbrasil.com.br/seguranca

. Windows Live OneCare
  http://safety.live.com/site/pt-BR/default.htm

Identificador CVE (http://cve.mitre.org): CVE-2007-0675

O CAIS recomenda que os administradores mantenham seus sistemas e 
aplicativos sempre atualizados, de acordo com as ultimas versoes e 
correcoes oferecidas pelos fabricantes.

Os Alertas do CAIS tambem sao oferecidos no formato RSS/RDF:
http://www.rnp.br/cais/alertas/rss.xml

Atenciosamente,

################################################################
#   CENTRO DE ATENDIMENTO A INCIDENTES DE SEGURANCA (CAIS)     #
#       Rede Nacional de Ensino e Pesquisa (RNP)               #
#                                                              #
# cais em cais.rnp.br       http://www.cais.rnp.br                #
# Tel. 019-37873300      Fax. 019-37873301                     #
# Chave PGP disponivel   http://www.rnp.br/cais/cais-pgp.key   #
################################################################
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iQCVAwUBSE/lnukli63F4U8VAQHZZgQAloyD7rw7j4Icav1IbdMHXdPBa/rZ/m/s
uaeIB6j66oicQAmv50Ybc6UIhaJpEO1g/Mzm1neui70EXTdUuSiFolEE4dtlwdDO
+Rk54oJrQBYls4GlmkIVlo3+eBNCqQTZisiPQlyK7mHpxTpQ0aKCxyrwyhySrNPs
ZgtpJLS4p+k=
=vW0u
-----END PGP SIGNATURE-----

----- End forwarded message -----