Microsoft Security Bulletin Coverage (September 08, 2015)
Dell SonicWALL has analyzed and addressed Microsoft’s security advisories for the month of September, 2015. A list of issues reported, along with Dell SonicWALL coverage information are as follows:
MS15-094 Cumulative Security Update fro Internet Explorer
- CVE-2015-2483 Information Disclosure Vulnerability
IPS: 11117 “Internet Explorer Information Disclosure Vulnerability (MS15-094) 3” - CVE-2015-2484 Tampering Vulnerability
This is a local vulnerability. - CVE-2015-2485 Memory Corruption Vulnerability
IPS: 11118 ” Internet Explorer Information Disclosure Vulnerability (MS15-094) 4″ - CVE-2015-2486 Memory Corruption Vulnerability
IPS: 11119 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 5” - CVE-2015-2487 Memory Corruption Vulnerability
IPS: 11120 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 7” - CVE-2015-2488 Memory Corruption Vulnerability
IPS: 11120 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 6” - CVE-2015-2489 Elevation of Privilege Vulnerability
This is a local vulnerability. - CVE-2015-2490 Memory Corruption Vulnerability
IPS: 11122 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 8” - CVE-2015-2491 Memory Corruption Vulnerability
IPS: 11123 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 9” - CVE-2015-2492 Memory Corruption Vulnerability
IPS: 11124 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 10” - CVE-2015-2493 Scripting Engine Memory Corruption Vulnerability
IPS: 11125 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 11” - CVE-2015-2494 Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-2498 Memory Corruption Vulnerability
IPS: 10728 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 18” - CVE-2015-2499 Memory Corruption Vulnerability
IPS: 11127 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 13” - CVE-2015-2500 Memory Corruption Vulnerability
IPS: 2239 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 1” - CVE-2015-2501 Memory Corruption Vulnerability
IPS: 2249 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 2” - CVE-2015-2541 Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-2542 Memory Corruption Vulnerability
There are no known exploits in the wild.
MS15-095 Cumulative Security Update for Microsoft Edge
- CVE-2015-2485 Memory Corruption Vulnerability
IPS: 11118 ” Internet Explorer Information Disclosure Vulnerability (MS15-094) 4″ - CVE-2015-2486 Memory Corruption Vulnerability
IPS: 11119 “Internet Explorer Memory Corruption Vulnerability (MS15-094) 5” - CVE-2015-2494 Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-2542 Memory Corruption Vulnerability
There are no known exploits in the wild.
MS15-096 Vulnerabilities in Active Directory Service Could Allow Denial of Service
- CVE-2015-2535 Active Directory Denial of Service Vulnerability
There are no known exploits in the wild.
MS15-097 Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution
- CVE-2015-2506 OpenType Font Parsing Vulnerability
There are no known exploits in the wild. - CVE-2015-2507 Font Driver Elevation of Privilege Vulnerability
This is a local vulnerability. - CVE-2015-2508 Font Driver Elevation of Privilege Vulnerability
This is a local vulnerability. - CVE-2015-2510 Font Parsing Remote Code Execution Vulnerability
SPY: 3182 “Malformed-File xls.MP.45” - CVE-2015-2511 Win32k Memory Corruption Elevation of Privilege Vulnerability
SPY: 3183 “Malformed-File exe.MP.11” - CVE-2015-2512 Font Driver Elevation of Privilege Vulnerability
This is a local vulnerability. - CVE-2015-2517 Win32k Memory Corruption Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2015-2518 Win32k Memory Corruption Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2015-2527 Win32k Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2015-2529 Kernel ASLR Bypass Vulnerability
This is a local vulnerability. - CVE-2015-2546 Win32k Memory Corruption Elevation of Privilege Vulnerability
There are no known exploits in the wild.
MS15-098 Vulnerabilities in Windows Journal Could Allow Remote Code Execution
- CVE-2015-2513 Windows Journal RCE Vulnerability
SPY: 3181 “Malformed-File jnt.MP.7” - CVE-2015-2514 Windows Journal RCE Vulnerability
There are no known exploits in the wild. - CVE-2015-2516 Windows Journal DoS Vulnerability
There are no known exploits in the wild. - CVE-2015-2519 Windows Journal Integer Overflow RCE Vulnerability
There are no known exploits in the wild. - CVE-2015-2530 Windows Journal RCE Vulnerability
There are no known exploits in the wild.
MS15-099 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution
- CVE-2015-2520 Microsoft Office Memory Corruption Vulnerability
IPS: 3184 “Print Spooler Informational 3”
- CVE-2015-2521 Microsoft Office Memory Corruption Vulnerability
IPS: 3185 “Web Application Remote Code Execution 14”
- CVE-2015-2522 Microsoft SharePoint XSS Spoofing Vulnerability
There are no known exploits in the wild. - CVE-2015-2523 Microsoft Office Memory Corruption Vulnerability
IPS: 3186 “EMC Captiva PDI ActiveX WriteToLog Method Invocation”
- CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability
IPS: 3187 “Suspicious ActiveX Method Invocation 2”
MS15-100 Vulnerability in Windows Media Center Could Allow Remote Code Execution
- CVE-2015-2509 Windows Media Center RCE Vulnerability
IPS: 11116 “Windows Media Center Remote Code Execution (MS15-100)”
MS15-101 Vulnerability in .Net Framework Could Allow Remote Code Execution
- CVE-2015-2504 .NET Elevation of Privilege Vulnerability
This is a local Vulnerability
- CVE-2015-2526 MVC Denial of Service Vulnerability
There are no known exploits in the wild.
MS15-102 Vulnerability in Windows Task Management Could Allow Elevation of Privilege
- CVE-2015-2524 Windows Task Management Elevation of Privilege Vulnerability
This is a local vulnerability. - CVE-2015-2525 Windows Task File Deletion Elevation of Privilege Vulnerability
This is a local Vulnerability
- CVE-2015-2528 Windows Task Management Elevation of Privilege Vulnerability
This is a local vulnerability.
MS15-103 Vulnerability in Microsoft Exchange Server Could Allow Elevation of Privilege
- CVE-2015-2505 Exchange Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2015-2543 Exchange Spoofing Vulnerability
There are no known exploits in the wild. - CVE-2015-2544 Exchange Spoofing Vulnerability
There are no known exploits in the wild.
MS15-104 Vulnerability in Skype for Business Server and Lync Server Could Allow Elevation of Privilege
- CVE-2015-2531 Skype for Business and Lync Server XSS Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2015-2532 Lync Server XSS Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2015-2536 Skype for Business and Lync Server XSS Elevation of Privilege Vulnerability
There are no known exploits in th
e wild.
MS15-105 Vulnerability in Windows Hyper-V Could Allow Information Disclosure
- CVE-2015-2534 Hyper-V Security Feature Bypass Vulnerability
There are no known exploits in the wild.