[월:] 2017년 03월

MS17-013 – Critical: Security Update for Microsoft Graphics Component (4013075) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync. The most serious of these vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Source: MS17-013 – Critical: Security Update for Microsoft Graphics Component (4013075) – Version: 1.0

MS17-021 – Important: Security Update for Windows DirectShow (4010318) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow an Information Disclosure if Windows DirectShow opens specially crafted media content that is hosted on a malicious website. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system. Source: MS17-021 – Important: Security Update for Windows DirectShow (4010318) – Version: 1.0

MS17-018 – Important: Security Update for Windows Kernel-Mode Drivers (4013083) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (March 14, 2017): Bulletin publishedSummary: This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of an affected system. Source: MS17-018 – Important: Security Update for Windows Kernel-Mode Drivers (4013083) – Version: 1.0

MS17-012 – Critical: Security Update for Microsoft Windows (4013078) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker running inside a virtual machine runs a specially crafted application. Source: MS17-012 – Critical: Security Update for Microsoft Windows (4013078) – Version: 1.0

MS17-0113 – Critical: Security Update for Microsoft Graphics Component (4013075) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (March 14, 2017): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync. The most serious of these vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Source: MS17-0113 – Critical: Security Update for Microsoft Graphics Component (4013075) – Version: 1.0