certfr_avis - certa-2010-avi-274

CERTA-2010-AVI-274

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités dans Opera permettent d'exécuter du code arbitraire à distance.

Description

Plusieurs vulnérabilités ont été découvertes dans Opera. Seuls les détails de l'une d'entre elles ont été dévoilés.

Un problème dans la gestion de certaines polices de caractères par Windows permet une élévation de privilèges. Cette vulnérabilité a fait l'objet d'un correctif de Microsoft (voir avis CERTA-2010-AVI-244), mais est exploitable au travers d'Opera sur les systèmes non mis à jour, ce qui permet donc l'exécution de code arbitraire à distance. Opera Software a publié un correctif qui protège l'exploitation de cette vulnérabilité via le navigateur, même sur les systèmes non mis à jour.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Opera versions 10.53 et antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Notes de la version 10.54 d'Opera pour Windows du 21 juin 2010	None	vendor-advisory
Avis CERTA-2010-AVI-244 :	-	other
Bulletin de sécurité 954 d'Opera :	-	other
Notes de la version 10.54 d'Opera pour Windows du 21 juin 2010 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eOpera\u003c/SPAN\u003e versions 10.53 et  ant\u00e9rieures.\u003c/P\u003e",
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Opera. Seuls les\nd\u00e9tails de l\u0027une d\u0027entre elles ont \u00e9t\u00e9 d\u00e9voil\u00e9s.\n\nUn probl\u00e8me dans la gestion de certaines polices de caract\u00e8res par\nWindows permet une \u00e9l\u00e9vation de privil\u00e8ges. Cette vuln\u00e9rabilit\u00e9 a fait\nl\u0027objet d\u0027un correctif de Microsoft (voir avis CERTA-2010-AVI-244), mais\nest exploitable au travers d\u0027Opera sur les syst\u00e8mes non mis \u00e0 jour, ce\nqui permet donc l\u0027ex\u00e9cution de code arbitraire \u00e0 distance. Opera\nSoftware a publi\u00e9 un correctif qui prot\u00e8ge l\u0027exploitation de cette\nvuln\u00e9rabilit\u00e9 via le navigateur, m\u00eame sur les syst\u00e8mes non mis \u00e0 jour.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2010-1255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1255"
    }
  ],
  "links": [
    {
      "title": "Avis CERTA-2010-AVI-244 :",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2010-AVI-244/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 954 d\u0027Opera :",
      "url": "http://www.opera.com/support/kb/view/954/"
    },
    {
      "title": "Notes de la version 10.54 d\u0027Opera pour Windows du 21 juin    2010 :",
      "url": "http://www.opera.com/docs/changelogs/windows/1054/"
    }
  ],
  "reference": "CERTA-2010-AVI-274",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-06-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eOpera\u003c/span\u003e\npermettent d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Opera",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Notes de la version 10.54 d\u0027Opera pour Windows du 21 juin 2010",
      "url": null
    }
  ]
}

CVE-2010-1255 (GCVE-0-2010-1255)

Vulnerability from cvelistv5 – Published: 2010-06-08 22:00 – Updated: 2024-08-07 01:14

Summary

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."

Severity ?

No CVSS data available.

CWE

Assigner

microsoft

References

URL

Tags

	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.opera.com/support/kb/view/954/	x_refsource_CONFIRM
	http://www.us-cert.gov/cas/techalerts/TA10-159B.html	third-party-advisoryx_refsource_CERT
	https://docs.microsoft.com/en-us/security-updates…	vendor-advisoryx_refsource_MS

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:7283",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.opera.com/support/kb/view/954/"
          },
          {
            "name": "TA10-159B",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA10-159B.html"
          },
          {
            "name": "MS10-032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to \"glyph outline information\" and TrueType fonts, aka \"Win32k TrueType Font Parsing Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:7283",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.opera.com/support/kb/view/954/"
        },
        {
          "name": "TA10-159B",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA10-159B.html"
        },
        {
          "name": "MS10-032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2010-1255",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to \"glyph outline information\" and TrueType fonts, aka \"Win32k TrueType Font Parsing Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:7283",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283"
            },
            {
              "name": "http://www.opera.com/support/kb/view/954/",
              "refsource": "CONFIRM",
              "url": "http://www.opera.com/support/kb/view/954/"
            },
            {
              "name": "TA10-159B",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA10-159B.html"
            },
            {
              "name": "MS10-032",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2010-1255",
    "datePublished": "2010-06-08T22:00:00",
    "dateReserved": "2010-04-05T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2010-AVI-274

Description

Solution

CVE-2010-1255 (GCVE-0-2010-1255)

Tags

Sightings

Nomenclature