Microsoft Security Bulletin Coverage (November 10, 2015)
Dell SonicWALL has analyzed and addressed Microsoft’s security advisories for the month of November 10, 2015. A list of issues reported, along with Dell SonicWALL coverage information are as follows:
MS15-112 Cumulative Security Update for Internet Explorer
- CVE-2015-2427 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild.
- CVE-2015-6064 Microsoft Browser Memory Corruption Vulnerability
IPS: 11260 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 5” - CVE-2015-6065 Internet Explorer Memory Corruption Vulnerability
IPS: 6041 “IInternet Explorer Memory Corruption Vulnerability (MS10-071) 1” - CVE-2015-6066 Internet Explorer Memory Corruption Vulnerability
IPS: 11261 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 6” - CVE-2015-6068 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-6069 Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2015-6070 Internet Explorer Memory Corruption Vulnerability
IPS: 11262 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 7” - CVE-2015-6071 Internet Explorer Memory Corruption Vulnerability
IPS: 11263 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 8” - CVE-2015-6072 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild.
- CVE-2015-6073 Microsoft Browser Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-6074 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-6075 Internet Explorer Memory Corruption Vulnerability
IPS: 11264 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 9” - CVE-2015-6076 Internet Explorer Memory Corruption Vulnerability
IPS: 11265 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 10” - CVE-2015-6077 Internet Explorer Memory Corruption Vulnerability
IPS: 6395 “Client Application Shellcode Exploit 23” - CVE-2015-6078 Microsoft Browser Memory Corruption Vulnerability
IPS: 11266 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 11” - CVE-2015-6079 Internet Explorer Memory Corruption Vulnerability
IPS: 11267 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 12” - CVE-2015-6080 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-6081 Internet Explorer Memory Corruption Vulnerability
IPS: 11243 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 1” - CVE-2015-6082 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-6084 Internet Explorer Memory Corruption Vulnerability
IPS: 11244 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 2” - CVE-2015-6085 Internet Explorer Memory Corruption Vulnerability
IPS: 11245 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 3” - CVE-2015-6086 Internet Explorer Information Disclosure Vulnerability
IPS: 11256 “Internet Explorer Information Disclosure Vulnerability (MS15-112) 1” - CVE-2015-6087 Internet Explorer Memory Corruption Vulnerability
IPS: 11255 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 4” - CVE-2015-6088 Microsoft Browser ASLR Bypass
There are no known exploits in the wild. - CVE-2015-6089 Scripting Engine Memory Corruption Vulnerability
IPS: 11257 “Scripting Engine Memory Corruption Vulnerability (MS15-112) 1”
MS15-113 Cumulative Security Update for Microsoft Edge
- CVE-2015-6064 Microsoft Browser Memory Corruption Vulnerability
IPS: 11260 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 5” - CVE-2015-6073 Microsoft Browser Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2015-6078 Microsoft Browser Memory Corruption Vulnerabi
lity
IPS: 11266 “Internet Explorer Memory Corruption Vulnerability (MS15-112) 11” - CVE-2015-6088 Microsoft Browser ASLR Bypass
There are no known exploits in the wild.
MS15-114 Security Update for Windows Journal to Address Remote Code Execution
- CVE-2015-6097 Windows Journal Heap Overflow Vulnerability
SPY: 3215 “Malformed-File jnt.MP.8”
MS15-115 Security Update for Microsoft Windows to Address Remote Code Execution
- CVE-2015-6100 Windows Kernel Memory Elevation of Privilege Vulnerability
This is a local Vulnerability
- CVE-2015-6101 Windows Kernel Memory Elevation of Privilege Vulnerability
This is a local Vulnerability
- CVE-2015-6102 Windows Kernel Memory Information Disclosure Vulnerability
This is a local Vulnerability
- CVE-2015-6103 Windows Graphics Memory Remote Code Execution Vulnerability
IPS: 3218 “HP Data Protector Remote Code Execution 3” - CVE-2015-6104 Windows Graphics Memory Remote Code Execution Vulnerability
IPS: 3219 “Active WebCam — Remote Camera Request” - CVE-2015-6109 Windows Kernel Memory Information Disclosure Vulnerability
This is a local Vulnerability
- CVE-2015-6113 Windows Kernel Security Feature Bypass Vulnerability
This is a local Vulnerability
MS15-116 Security Updates for Microsoft Office to Address Remote Code Execution
- CVE-2015-2503 Microsoft Office Elevation of Privilege Vulnerability
This is a local Vulnerability
- CVE-2015-6038 Microsoft Office Memory Corruption Vulnerability
IPS: 11258 “Malformed Excel Document 1” - CVE-2015-6091 Microsoft Office Memory Corruption Vulnerability
SPY: 3213 “Malformed-File doc.MP.31” - CVE-2015-6092 Microsoft Office Memory Corruption Vulnerability
SPY: 3214 “Malformed-File doc.MP.32” - CVE-2015-6093 Microsoft Office Memory Corruption Vulnerability
SPY: 3216 “Malformed-File docx.MP.8” - CVE-2015-6094 Microsoft Office Memory Corruption Vulnerability
SPY: 3217 “Malformed-File xlsb.MP.1”
MS15-117 Security Update for NDIS to Address Elevation of Privilege
- CVE-2015-6098 Windows Kernel Memory Corruption Vulnerability
This is a local Vulnerability
MS15-118 Security Update for .NET Framework to Address Elevation of Privilege
- CVE-2015-6096 .NET Information Disclosure Vulnerability
GAV “Malformed.svg.MP.1” - CVE-2015-6099 .NET Elevation of Privilege Vulnerability
IPS “Cross-Site Scripting (XSS) Attack signatures” - CVE-2015-6115 .NET ASLR Bypass
This is a local Vulnerability
MS15-119 Security Update for Winsock to Address Elevation of Privilege
- CVE-2015-2478 Winsock Elevation of Privilege Vulnerability
This is a local Vulnerability
MS15-120 Security Update for IPSec to Address Denial of Service
- CVE-2015-6111 Windows IPSec Denial of Service Vulnerability
There are no known exploits in the wild.
MS15-121 Security Update for Schannel to Address Spoofing
- CVE-2015-6112 Schannel TLS Triple Handshake Vulnerability
There are no known exploits in the wild.
MS15-122 Security Update for Kerberos to Address Security Feature Bypass
- CVE-2015-6095 Windows Kerberos Security Feature Bypass
There are no known exploits in the wild.
MS15-123 Security Update for Skype for Business and Microsoft Lync to Address Information Disclosure
- CVE-2015-6061 Server Input Validation Security Feature Bypass Vulnerability
There are no known exploits in the wild.