[월:] 2017년 03월

MS17-020 – Important: Security Update for Windows DVD Maker (3208223) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves an information disclosure vulnerability in Windows DVD Maker. The vulnerability could allow an attacker to obtain information to further compromise a target system. Source: MS17-020 – Important: Security Update for Windows DVD Maker (3208223) – Version: 1.0

MS17-010 – Critical: Security Update for Microsoft Windows SMB Server (4013389) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker sends specially crafted messages to a Windows SMBv1 server. Source: MS17-010 – Critical: Security Update for Microsoft Windows SMB Server (4013389) – Version: 1.0

MS17-019 – Important: Security Update for Active Directory Federation Services (4010320) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves a vulnerability in Active Directory Federation Services (ADFS). The vulnerability could allow information disclosure if an attacker sends a specially crafted request to an ADFS server, allowing the attacker to read sensitive information about the target system. Source: MS17-019 – Important: Security Update for Active Directory Federation Services (4010320) – Version: 1.0

MS17-015 – Important: Security Update for Microsoft Exchange Server (4013242) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Exchange Server. Source: MS17-015 – Important: Security Update for Microsoft Exchange Server (4013242) – Version: 1.0

MS17-022 – Important: Security Update for Microsoft XML Core Services (4010321) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a user visits a malicious website. However, in all cases an attacker would have no way to force a user to click a specially crafted link. An attacker would have to convince a user to click the link, typically by way of an enticement in an email or Instant Messenger message. Source: MS17-022 – Important: Security Update for Microsoft XML Core Services (4010321) – Version: 1.0