【漏洞公告】微软“周二补丁日”—2017年12月|云安全 - 开发者论坛

美国时间2017年12月12日，微软发布12月份的安全公告，本次安全公告显示 微软修补了34个漏洞，其中共有21个漏洞被评为关键，另外13个被评为重要。 受影响的是Internet Explorer，Microsoft Edge，Microsoft Windows，Microsoft Office，SharePoint和Exchange。 
 
 
除了解决的33个漏洞之外，微软还发布了Microsoft Office更新，通过禁用动态数据交换（DDE）协议来提高安全性。 ADV170021中详细介绍了此更新，并影响了所有受支持的Office版本。 无法安装此更新的组织应咨询有助于减轻DDE开发尝试的解决方法的建议。 
 
 
值得注意本次安全公告中，微软发布了 英国国家网络安全中心的研究发现了远程代码执行漏洞- Microsoft恶意软件保护引擎（MPE）的两个修补程序（CVE-2017-11937和CVE-2017-11940）。  
具体公告详情如下:  
  

---

漏洞影响范围:  
十二月发布的漏洞公告涉及到的微软产品:

• Internet Explorer
• Microsoft Edge
• Microsoft Windows
• Microsoft Office and Microsoft Office Services and Web Apps
• Microsoft Exchange Server
• ChakraCore
• Microsoft Malware Protection Engine

 
 
 
严重漏洞 

• CVE-2017-11886 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11888 - Microsoft Edge Memory Corruption Vulnerability
• CVE-2017-11889 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11890 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11893 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11894 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11895 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11901 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11903 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11905 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11907 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11908 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11909 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11910 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11911 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11912 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11914 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11918 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11930 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11937 - Microsoft Malware Protection Engine Remote Code Execution Vulnerability
• CVE-2017-11940 - Microsoft Malware Protection Engine Remote Code Execution Vulnerability

 
高危漏洞 

• CVE-2017-11885 - Windows RRAS Service Remote Code Execution Vulnerability
• CVE-2017-11887 - Scripting Engine Information Disclosure Vulnerability
• CVE-2017-11899 - Microsoft Windows Security Feature Bypass Vulnerability
• CVE-2017-11906 - Scripting Engine Information Disclosure Vulnerability
• CVE-2017-11913 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11916 - Scripting Engine Memory Corruption Vulnerability
• CVE-2017-11919 - Scripting Engine Information Disclosure Vulnerability
• CVE-2017-11927 - Microsoft Windows Information Disclosure Vulnerability
• CVE-2017-11932 - Microsoft Exchange Spoofing Vulnerability
• CVE-2017-11934 - Microsoft PowerPoint Information Disclosure Vulnerability
• CVE-2017-11935 - Microsoft Excel Remote Code Execution Vulnerability
• CVE-2017-11936 - Microsoft SharePoint Elevation of Privilege Vulnerability
• CVE-2017-11939 - Microsoft Office Information Disclosure Vulnerability

 
安全 建议 ：

1. 阿里云安全团队建议用户关注，并根据业务情况择机更新补丁，以提高服务器安全性：  
2. 建议用户打开Windows Update功能，然后点击“检查更新”按钮，根据业务情况下载 安装相关安全补丁，安装完毕后重启服务器，检查系统运行情况。;

          注意：在更新安装升级前，建议做好测试工作，并务必做好 数据备份和快照，防止出现意外。  
 
 
情报来源:  

• http://blog.talosintelligence.com/2017/12/ms-tuesday.html

 
 
[ 此帖被正禾在2017-12-13 18:55重新编辑 ]