Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

1) An error exists within the Windows Authenticode Signature Verification function when processing certain fields of the file digest of portable executable (PE) and cabinet file formats. This can be exploited to inject arbitrary code into a signed executable without making the signature of the file invalid.

2) An error exists in the Windows Authenticode Signature verification for cabinet (.cab) file formats when processing certain fields of the file digest. This can be exploited to inject arbitrary code into a cabinet file without making the signature of the file invalid.

Successful exploitation requires that a user is tricked into opening or viewing a specially crafted file.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
MS10-019 (KB981210, KB978601, KB979309)
http://www.microsoft.com/technet/security/Bulletin/MS10-019.mspx

Deep Links
Links available to Secunia VIM customers