Check Point Advisories

Microsoft DirectPlay Office File Handling Invalid Memory Free (MS12-082; CVE-2012-1537)

Vulnerability
Protection

Check Point Reference:	CPAI-2013-016
Date Published:	20 Feb 2013
Severity:	High
Last Updated:	Friday 19 April, 2024
Source:	CVE-2012-1537
Protection Provided by:	Security Gateway R75
Who is Vulnerable?	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2012
Vulnerability Description	An invalid memory free vulnerability exists in Microsoft DirectPlay.
Update/Patch Avaliable	Apply patches from: MS12-082

Protection Overview

This protection will detect and block the vulnerable ActiveX Control.

In order for the protection to be activated, update your product to the latest update. For information on how to update , go to SBP-2006-05, Protection tab and select the version of your choice.

Security Gateway R75 / R71 / R70

In the IPS tab, click Protections and find the Microsoft DirectPlay Office File Handling Invalid Memory Free (MS12-082) protection using the Search tool and Edit the protection's settings.
Install policy on all modules.

SmartView Tracker will log the following entries:
Attack Name: Content Protection Violation
Attack Information: Microsoft DirectPlay Office File Handling Invalid Memory Free (MS12-082)