CERTFR-2021-AVI-182
Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans les produits Microsoft. Elles permettent à un attaquant de provoquer une exécution de code à distance, un contournement de la fonctionnalité de sécurité et une atteinte à la confidentialité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Microsoft N/A Visual Studio Code - Java Extension Pack
Microsoft Azure Azure Spring Cloud
Microsoft N/A Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft N/A Microsoft Visio 2010 Service Pack 2 (éditions 64 bits)
Microsoft Azure Azure Kubernetes Service
Microsoft N/A Microsoft Visio 2013 Service Pack 1 (éditions 32 bits)
Microsoft N/A Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
Microsoft N/A Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Microsoft N/A Microsoft Quantum Development Kit pour Visual Studio Code
Microsoft N/A Microsoft Visual Studio Code ESLint extension
Microsoft N/A Microsoft Business Productivity Servers 2010 Service Pack 2
Microsoft N/A HEVC Video Extensions
Microsoft Azure Azure Service Fabric
Microsoft N/A Power BI Report Server version 15.0.1103.234
Microsoft N/A Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft N/A Microsoft Visio 2016 (édition 64 bits)
Microsoft N/A Visual Studio Code
Microsoft N/A Microsoft 365 Apps pour Enterprise pour systèmes 32 bits
Microsoft N/A Microsoft 365 Apps pour Enterprise pour 64 bits Systems
Microsoft N/A Microsoft Visio 2016 (édition 32 bits)
Microsoft N/A Power BI Report Server version 15.0.1104.300
Microsoft N/A Visual Studio Code Remote - Containers Extension
Microsoft N/A Microsoft Visio 2010 Service Pack 2 (éditions 32 bits)
Microsoft Azure Azure Sphere
Microsoft N/A Microsoft Visio 2013 Service Pack 1 (éditions 64 bits)
Microsoft Azure Azure Container Instance
Microsoft N/A Microsoft Visual Studio 2019 version 16.8 (includes 16.0 - 16.7)
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Visual Studio Code - Java Extension Pack",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Spring Cloud",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visio 2010 Service Pack 2 (\u00e9ditions 64 bits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Kubernetes Service",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visio 2013 Service Pack 1 (\u00e9ditions 32 bits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Quantum Development Kit pour Visual Studio Code",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio Code ESLint extension",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Business Productivity Servers 2010 Service Pack 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "HEVC Video Extensions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Service Fabric",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Power BI Report Server version 15.0.1103.234",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visio 2016 (\u00e9dition 64 bits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour syst\u00e8mes 32 bits",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft 365 Apps pour Enterprise pour 64 bits Systems",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visio 2016 (\u00e9dition 32 bits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Power BI Report Server version 15.0.1104.300",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Visual Studio Code Remote - Containers Extension",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visio 2010 Service Pack 2 (\u00e9ditions 32 bits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Sphere",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visio 2013 Service Pack 1 (\u00e9ditions 64 bits)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Container Instance",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2019 version 16.8 (includes 16.0 - 16.7)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-27060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27060"
    },
    {
      "name": "CVE-2021-27048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27048"
    },
    {
      "name": "CVE-2021-27075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27075"
    },
    {
      "name": "CVE-2021-27061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27061"
    },
    {
      "name": "CVE-2021-27053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27053"
    },
    {
      "name": "CVE-2021-27055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27055"
    },
    {
      "name": "CVE-2021-27050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27050"
    },
    {
      "name": "CVE-2021-27081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27081"
    },
    {
      "name": "CVE-2021-26859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26859"
    },
    {
      "name": "CVE-2021-27082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27082"
    },
    {
      "name": "CVE-2021-27076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27076"
    },
    {
      "name": "CVE-2021-27049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27049"
    },
    {
      "name": "CVE-2021-27056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27056"
    },
    {
      "name": "CVE-2021-27084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27084"
    },
    {
      "name": "CVE-2021-27051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27051"
    },
    {
      "name": "CVE-2021-21300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21300"
    },
    {
      "name": "CVE-2021-27083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27083"
    },
    {
      "name": "CVE-2021-27047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27047"
    },
    {
      "name": "CVE-2021-27057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27057"
    },
    {
      "name": "CVE-2021-27054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27054"
    },
    {
      "name": "CVE-2021-24110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24110"
    },
    {
      "name": "CVE-2021-27062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27062"
    },
    {
      "name": "CVE-2021-26902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26902"
    },
    {
      "name": "CVE-2021-27074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27074"
    },
    {
      "name": "CVE-2021-24089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24089"
    },
    {
      "name": "CVE-2021-27058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27058"
    },
    {
      "name": "CVE-2021-27080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27080"
    },
    {
      "name": "CVE-2021-24108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-24108"
    }
  ],
  "initial_release_date": "2021-03-10T00:00:00",
  "last_revision_date": "2021-03-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2021-AVI-182",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-03-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Microsoft\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code \u00e0 distance, un\ncontournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9 et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 09 mars 2021",
      "url": "https://portal.msrc.microsoft.com/fr-FR/security-guidance"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.