# MA-452.022015: MyCERT Advisory - Microsoft Releases Critical Security Bulletin

**Date:** 16 Feb 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-452.022015  
**Advisory ID:** MA-452.022015

---

#### **1.0 Introduction**
Microsoft has released Security Bulletin MS15-011 to address a critical vulnerability in Windows. This security update contains a new policy feature (UNC Hardened Access), which is not enabled by default. To enable this feature, a system administrator must deploy the update, then apply the Group Policy settings described in the bulletin. For complete protection against this vulnerability, system reboots are required. Other than the update and configuration instructions contained in the Security Bulletin, there are no known workarounds or mitigations for this vulnerability. Updates are not available for Windows XP, Windows Server 2003, or Windows 2000.
**2.0 Impact**
These updates address vulnerabilities that may allow a remote attacker to take complete control of an affected system.
**3.0 Affected Products**
The detail lists of the affected products updates are as below:
- Windows server 2003
- Windows Vista
- Windows Server 2008
- Windows 7
- Windows Server 2008 R2
- Windows 8 and Windows 8.1
- Windows Server 2012 and Windows Server 2012 R2
- Windows RT and Windows RT 8.1
- Server Core installation option
**4.0 Recommendation**
MyCERT recommends users and administrators to update their software by following either of these instructions below:
4.1 For Windows Server 2003:
- Windows Server 2003 is affected, but an update is not being issued for it.
4.2 For Windows Vista:
- [Windows Vista Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=ddf6f5df-113d-4e08-9422-d72f1bb3ea01)
- [Windows Vista x64 Edition Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=ab8a7a65-a0f6-4f79-99ed-4b4cfcbcadfd)
4.3 For Windows Server 2008:
- [Windows Server 2008 for 32-bit Systems Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=a507236d-0ce1-4e8c-adbe-20186f2c1e1b)
- [Windows Server 2008 for x64-based Systems Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=5b009bb4-738d-42ce-9e35-5d4580b0ad25)
- [Windows Server 2008 for Itanium-based Systems Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=7c37a025-81ea-4360-bcde-65b39171202f)
4.4 For Windows 7:
- [Windows 7 for 32-bit Systems Service Pack 1](https://www.microsoft.com/downloads/details.aspx?familyid=51090490-014f-41c4-a9e5-00765457737f)
- [Windows 7 for x64-based Systems Service Pack 1](https://www.microsoft.com/downloads/details.aspx?familyid=0f56004d-5870-4294-b630-2f984640e8c6)
4.5 For Windows Server 2008 R2:
- [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://www.microsoft.com/downloads/details.aspx?familyid=b52b259b-5c72-46a9-8559-3d38c0c7a126)
- [Windows Server 2008 R2 for Itanium-based Systems Service Pack 1](https://www.microsoft.com/downloads/details.aspx?familyid=432b66df-a531-4280-9aaf-6ce696e2f696)
4.6 For Windows 8 and Windows 8.1:
- [Windows 8 for 32-bit Systems](https://www.microsoft.com/downloads/details.aspx?familyid=54e7605b-a6b3-445f-9d43-ac3fa937bc47)
- [Windows 8 for x64-based Systems](https://www.microsoft.com/downloads/details.aspx?familyid=374c14fc-82cf-4cfa-94f0-695e99d7c423)
- [Windows 8.1 for 32-bit Systems](https://www.microsoft.com/downloads/details.aspx?familyid=29857dc6-8dec-41c1-afee-a898d602d3ef)
- [Windows 8.1 for x64-based Systems](https://www.microsoft.com/downloads/details.aspx?familyid=f0adfdbe-6056-4be1-8294-3b808c0a0e89)
4.7 For Windows Server 2012 and Windows Server 2012 R2:
- [Windows Server 2012](https://www.microsoft.com/downloads/details.aspx?familyid=1e6052c8-77a2-4bfd-905f-50e86d6e5efa)
- [Windows Server 2012 R2](https://www.microsoft.com/downloads/details.aspx?familyid=48248922-d55a-43b7-a564-671d79127ac7)
4.8 For Windows RT and Windows RT 8.1:
- Windows RT [2]
- Windows RT 8.1[2]
Note: [2] This update is available via Windows Update only.
4.9 For Server Core installation option:
- [Windows Server 2008 for 32-bit Systems Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=a507236d-0ce1-4e8c-adbe-20186f2c1e1b)
- [Windows Server 2008 for x64-based Systems Service Pack 2](https://www.microsoft.com/downloads/details.aspx?familyid=5b009bb4-738d-42ce-9e35-5d4580b0ad25)
- [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://www.microsoft.com/downloads/details.aspx?familyid=b52b259b-5c72-46a9-8559-3d38c0c7a126)
- [Windows Server 2012](https://www.microsoft.com/downloads/details.aspx?familyid=1e6052c8-77a2-4bfd-905f-50e86d6e5efa)
- [Windows Server 2012 R2](https://www.microsoft.com/downloads/details.aspx?familyid=48248922-d55a-43b7-a564-671d79127ac7)
4.10 Microsoft has released an update addressing this vulnerability.
Kindly refer to [Microsoft Security Bulletin MS15-011](https://technet.microsoft.com/library/security/MS15-011). Administrators are recommended to prioritize the application of the patch, and concurrently review and test the necessary configuration changes discussed in the associated [Knowledge Base article (KB3000483).](http://support.microsoft.com/kb/3000483)
The how-to perform of the Windows Update is available at the following URL:
- <http://www.mycert.org.my/en/resources/os/main/main/detail/707/index.html>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#d3b0aab1b6a1eaeaea93b0aab1b6a1a0b6b0a6a1baa7aafdbeaa) or [[email protected]](/cdn-cgi/l/email-protection#620f1b01071016220f1b010710164c0d10054c0f1b) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <https://www.twitter.com/mycert>
Facebook: <https://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0References**
- Microsoft Releases Critical Security Bulletin; [https://www.us-cert.gov/ncas/current-activity/2015/02/10/Microsoft-      Releases-Critical-Security-Bulletin](https://www.us-cert.gov/ncas/current-activity/2015/02/10/Microsoft-Releases-Critical-Security-Bulletin)
- MS15-011: Vulnerability in Group Policy could allow remote code execution: February 10, 2015; <http://support.microsoft.com/kb/3000483>
- Microsoft Security Bulletin MS15-011; <https://technet.microsoft.com/library/security/MS15-011>
- MS15-011 & MS15-014: Hardening Group Policy; [http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx](http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-%09ms15-014-hardening-group-policy.aspx)