certfr_avis - certa-2010-avi-274

CERTA-2010-AVI-274

Vulnerability from certfr_avis

Plusieurs vulnérabilités dans Opera permettent d'exécuter du code arbitraire à distance.

Description

Plusieurs vulnérabilités ont été découvertes dans Opera. Seuls les détails de l'une d'entre elles ont été dévoilés.

Un problème dans la gestion de certaines polices de caractères par Windows permet une élévation de privilèges. Cette vulnérabilité a fait l'objet d'un correctif de Microsoft (voir avis CERTA-2010-AVI-244), mais est exploitable au travers d'Opera sur les systèmes non mis à jour, ce qui permet donc l'exécution de code arbitraire à distance. Opera Software a publié un correctif qui protège l'exploitation de cette vulnérabilité via le navigateur, même sur les systèmes non mis à jour.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Opera versions 10.53 et antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Notes de la version 10.54 d'Opera pour Windows du 21 juin 2010	None	vendor-advisory
Avis CERTA-2010-AVI-244 :	-	other
Bulletin de sécurité 954 d'Opera :	-	other
Notes de la version 10.54 d'Opera pour Windows du 21 juin 2010 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eOpera\u003c/SPAN\u003e versions 10.53 et  ant\u00e9rieures.\u003c/P\u003e",
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Opera. Seuls les\nd\u00e9tails de l\u0027une d\u0027entre elles ont \u00e9t\u00e9 d\u00e9voil\u00e9s.\n\nUn probl\u00e8me dans la gestion de certaines polices de caract\u00e8res par\nWindows permet une \u00e9l\u00e9vation de privil\u00e8ges. Cette vuln\u00e9rabilit\u00e9 a fait\nl\u0027objet d\u0027un correctif de Microsoft (voir avis CERTA-2010-AVI-244), mais\nest exploitable au travers d\u0027Opera sur les syst\u00e8mes non mis \u00e0 jour, ce\nqui permet donc l\u0027ex\u00e9cution de code arbitraire \u00e0 distance. Opera\nSoftware a publi\u00e9 un correctif qui prot\u00e8ge l\u0027exploitation de cette\nvuln\u00e9rabilit\u00e9 via le navigateur, m\u00eame sur les syst\u00e8mes non mis \u00e0 jour.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2010-1255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1255"
    }
  ],
  "initial_release_date": "2010-06-21T00:00:00",
  "last_revision_date": "2010-06-21T00:00:00",
  "links": [
    {
      "title": "Avis CERTA-2010-AVI-244 :",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2010-AVI-244/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 954 d\u0027Opera :",
      "url": "http://www.opera.com/support/kb/view/954/"
    },
    {
      "title": "Notes de la version 10.54 d\u0027Opera pour Windows du 21 juin    2010 :",
      "url": "http://www.opera.com/docs/changelogs/windows/1054/"
    }
  ],
  "reference": "CERTA-2010-AVI-274",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-06-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eOpera\u003c/span\u003e\npermettent d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Opera",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Notes de la version 10.54 d\u0027Opera pour Windows du 21 juin 2010",
      "url": null
    }
  ]
}

CVE-2010-1255 (GCVE-0-2010-1255)

Vulnerability from cvelistv5

Published

2010-06-08 22:00

Modified

2024-08-07 01:14

Severity ?

CWE

Summary

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to "glyph outline information" and TrueType fonts, aka "Win32k TrueType Font Parsing Vulnerability."

References

URL

Tags

	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283	vdb-entry, signature, x_refsource_OVAL
	http://www.opera.com/support/kb/view/954/	x_refsource_CONFIRM
	http://www.us-cert.gov/cas/techalerts/TA10-159B.html	third-party-advisory, x_refsource_CERT
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032	vendor-advisory, x_refsource_MS

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:14:06.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:7283",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.opera.com/support/kb/view/954/"
          },
          {
            "name": "TA10-159B",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA10-159B.html"
          },
          {
            "name": "MS10-032",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-06-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to \"glyph outline information\" and TrueType fonts, aka \"Win32k TrueType Font Parsing Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:7283",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.opera.com/support/kb/view/954/"
        },
        {
          "name": "TA10-159B",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA10-159B.html"
        },
        {
          "name": "MS10-032",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2010-1255",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 allows local users to execute arbitrary code via vectors related to \"glyph outline information\" and TrueType fonts, aka \"Win32k TrueType Font Parsing Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:7283",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7283"
            },
            {
              "name": "http://www.opera.com/support/kb/view/954/",
              "refsource": "CONFIRM",
              "url": "http://www.opera.com/support/kb/view/954/"
            },
            {
              "name": "TA10-159B",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA10-159B.html"
            },
            {
              "name": "MS10-032",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2010-1255",
    "datePublished": "2010-06-08T22:00:00",
    "dateReserved": "2010-04-05T00:00:00",
    "dateUpdated": "2024-08-07T01:14:06.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2010-AVI-274

Vulnerability from certfr_avis

Description

Solution

CVE-2010-1255 (GCVE-0-2010-1255)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature