SonicWALL has analyzed and addressed Microsoft’s security advisories for the month of October, 2011. A list of issues reported, along with SonicWALL coverage information follows:

MS11-075 Vulnerability in Microsoft Active Accessibility Could Allow Remote Code Execution (2623699)

• CVE-2011-1247 Active Accessibility Insecure Library Loading Vulnerability
  IPS: 5726 – Possible Binary Planting Attempt

MS11-076 Vulnerability in Windows Media Center Could Allow Remote Code Execution (2604926)

• CVE-2011-2009 Media Center Insecure Library Loading Vulnerability
  IPS: 5726 – Possible Binary Planting Attempt

MS11-077 Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2567053)

• CVE-2011-1985 Win32k Null Pointer De-reference Vulnerability
  This is a local vulnerability.
• CVE-2011-2002 Win32k TrueType Font Type Translation Vulnerability
  There is no feasible method of detection.
• CVE-2011-2003 Font Library File Buffer Overrun Vulnerability
  IPS: 2252 – Malformed OpenType Font 10b
• CVE-2011-2011 Win32k Use After Free Vulnerability
  There is no feasible method of detection.

MS11-078 Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2604930)

• CVE-2011-1253 Class Inheritance Vulnerability
  GAV: MsApp.Exp.MP.1

MS11-079 Vulnerabilities in Microsoft Forefront Unified Access Gateway Could Cause Remote Code Execution (2544641)

• CVE-2011-1895 ExcelTable Response Splitting XSS Vulnerability
  IPS: 2418 – ExcelTable Code Injection 1
• CVE-2011-1896 ExcelTable Reflected XSS Vulnerability
  IPS: 2419 – ExcelTable Code Injection 2
• CVE-2011-1897 Default Reflected XSS Vulnerability
  IPS: 2300 – Generic Cross-Site Scripting (XSS) Attempt 24
• CVE-2011-1969 Poisoned Cup of Code Execution Vulnerability
  IPS: 2420 – Generic Java Applet Exploit 3
• CVE-2011-2012 Null Session Cookie Crash
  IPS: 2258 – Suspicious HTTP Cookie Header 3

MS11-080 Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2592799)

• CVE-2011-2005 Ancillary Function Driver Elevation of Privilege Vulnerability
  This is a local vulnerability.

MS11-081 Cumulative Security Update for Internet Explorer (2586448)

• CVE-2011-1993 Scroll Event Remote Code Execution Vulnerability
  IPS: 7029 – MS IE Scroll Event Remote Code Execution Exploit
• CVE-2011-1995 OLEAuto32.dll Remote Code Execution Vulnerability
  IPS: 7028 – MS IE OLEAuto32.dll Remote Code Execution Exploit
• CVE-2011-1996 Option Element Remote Code Execution Vulnerability
  IPS: 7027 – MS IE Option Element Remote Code Execution Exploit
• CVE-2011-1997 OnLoad Event Remote Code Execution Vulnerability
  IPS: 7026 – MS IE OnLoad Event Remote Code Execution Exploit
• CVE-2011-1998 Jscript9.dll Remote Code Execution Vulnerability
  IPS: 7025 – MS IE Jscript9.dll Remote Code Execution Exploit
• CVE-2011-1999 Select Element Remote Code Execution Vulnerability
  IPS: 7024 – MS IE Select Element Remote Code Execution Exploit
• CVE-2011-2000 Body Element Remote Code Execution Vulnerability
  IPS: 7022 – MS IE Body Element Remote Code Execution Exploit
• CVE-2011-2001 Virtual Function Table Corruption Remote Code Execution Vulnerability
  IPS: 7021 – MS IE Virtual Function Table Corruption Exploit

MS11-082 Vulnerabilities in Host Integration Server Could Allow Denial of Service (2607670)

• CVE-2011-2007 Endless Loop DoS in snabase.exe Vulnerability
  IPS: 5012 – Generic UDP Shellcode Exploit 2
• CVE-2011-2008 Access of Unallocated Memory DoS Vulnerability
  IPS: 4896 – Generic Server Application Shellcode Exploit 9
  IPS: 5512 – Generic Server Application Shellcode Exploit 28
  IPS: 6701 – MS Host Integration Server DoS