Alert GCSA-15049 - Bollettino di Sicurezza Microsoft Dicembre 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
******************************************************************
Alert ID: GCSA-15049
Data: 10 Dicembre 2015
Titolo: Bollettino di Sicurezza Microsoft Dicembre 2015
******************************************************************
:: Descrizione del problema
Microsoft ha rilasciato 12 bollettini di sicurezza relativi
a vulnerabilita' presenti nei sistemi operativi Windows
ed in altre applicazioni:
MS15-124 Cumulative Security Update for Internet Explorer (3116180)
MS15-125 Cumulative Security Update for Microsoft Edge (3116184)
MS15-126 Cumulative Security Update for JScript and VBScript (3116178)
MS15-127 Security Update for Microsoft Windows DNS (3100465)
MS15-128 Security Update for Microsoft Graphics Component (3104503)
MS15-129 Security Update for Silverlight (3106614)
MS15-130 Security Update for Microsoft Uniscribe (3108670)
MS15-131 Security Update for Microsoft Office (3116111)
MS15-132 Security Update for Microsoft Windows (3116162)
MS15-133 Security Update for Windows PGM (3116130)
MS15-134 Security Update for Windows Media Center (3108669)
MS15-135 Security Update for Windows Kernel-Mode Drivers (3119075)
Maggiori dettagli sono disponibili nella segnalazioni ufficiali
alla sezione "Riferimenti".
:: Software interessato
Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Windows Server
Microsoft Office
Microsoft .NET Framework
Microsoft Lync
Skype for Business
Microsoft Silverlight
:: Impatto
Esecuzione remota di codice arbitrario
Acquisizione di privilegi piu' elevati
:: Soluzioni
Installare manualmente le patch indicate nei bollettini Microsoft,
oppure utilizzare uno degli strumenti di aggiornamento come:
Aggiornamenti Automatici, Windows Update, Microsoft Update,
Windows Server Update Services, Systems Management Server.
:: Riferimenti
Riepilogo dei bollettini Microsoft sulla sicurezza, dicembre 2015
https://technet.microsoft.com/library/security/ms15-dec
Bollettini Microsoft sulla sicurezza
https://technet.microsoft.com/it-it/library/security/MS15-124
https://technet.microsoft.com/it-it/library/security/MS15-125
https://technet.microsoft.com/it-it/library/security/MS15-126
https://technet.microsoft.com/it-it/library/security/MS15-127
https://technet.microsoft.com/it-it/library/security/MS15-128
https://technet.microsoft.com/it-it/library/security/MS15-129
https://technet.microsoft.com/it-it/library/security/MS15-130
https://technet.microsoft.com/it-it/library/security/MS15-131
https://technet.microsoft.com/it-it/library/security/MS15-132
https://technet.microsoft.com/it-it/library/security/MS15-133
https://technet.microsoft.com/it-it/library/security/MS15-134
https://technet.microsoft.com/it-it/library/security/MS15-135
Microsoft Knowledge Base
http://support.microsoft.com/kb/3116180
http://support.microsoft.com/kb/3116184
http://support.microsoft.com/kb/3116178
http://support.microsoft.com/kb/3100465
http://support.microsoft.com/kb/3104503
http://support.microsoft.com/kb/3106614
http://support.microsoft.com/kb/3108670
http://support.microsoft.com/kb/3116111
http://support.microsoft.com/kb/3116162
http://support.microsoft.com/kb/3116130
http://support.microsoft.com/kb/3108669
http://support.microsoft.com/kb/3119075
Microsoft Update
http://windowsupdate.microsoft.com
https://www.update.microsoft.com/
http://support.microsoft.com/kb/294871
SANS ISC Diary
https://isc.sans.edu/diary.html?storyid=20461
I riferimenti CVE sono disponibili
nelle segnalazioni originali.
GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iD8DBQFWaVyMwZxMk2USYEIRAhQGAJ0QafgEQhPhqa4KismXisxnyONBBwCgw8dD
JF6CV50lSu0tEiUUW3lX8ZU=
=bQtQ
-----END PGP SIGNATURE-----
Hash: SHA1
******************************************************************
Alert ID: GCSA-15049
Data: 10 Dicembre 2015
Titolo: Bollettino di Sicurezza Microsoft Dicembre 2015
******************************************************************
:: Descrizione del problema
Microsoft ha rilasciato 12 bollettini di sicurezza relativi
a vulnerabilita' presenti nei sistemi operativi Windows
ed in altre applicazioni:
MS15-124 Cumulative Security Update for Internet Explorer (3116180)
MS15-125 Cumulative Security Update for Microsoft Edge (3116184)
MS15-126 Cumulative Security Update for JScript and VBScript (3116178)
MS15-127 Security Update for Microsoft Windows DNS (3100465)
MS15-128 Security Update for Microsoft Graphics Component (3104503)
MS15-129 Security Update for Silverlight (3106614)
MS15-130 Security Update for Microsoft Uniscribe (3108670)
MS15-131 Security Update for Microsoft Office (3116111)
MS15-132 Security Update for Microsoft Windows (3116162)
MS15-133 Security Update for Windows PGM (3116130)
MS15-134 Security Update for Windows Media Center (3108669)
MS15-135 Security Update for Windows Kernel-Mode Drivers (3119075)
Maggiori dettagli sono disponibili nella segnalazioni ufficiali
alla sezione "Riferimenti".
:: Software interessato
Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Windows Server
Microsoft Office
Microsoft .NET Framework
Microsoft Lync
Skype for Business
Microsoft Silverlight
:: Impatto
Esecuzione remota di codice arbitrario
Acquisizione di privilegi piu' elevati
:: Soluzioni
Installare manualmente le patch indicate nei bollettini Microsoft,
oppure utilizzare uno degli strumenti di aggiornamento come:
Aggiornamenti Automatici, Windows Update, Microsoft Update,
Windows Server Update Services, Systems Management Server.
:: Riferimenti
Riepilogo dei bollettini Microsoft sulla sicurezza, dicembre 2015
https://technet.microsoft.com/library/security/ms15-dec
Bollettini Microsoft sulla sicurezza
https://technet.microsoft.com/it-it/library/security/MS15-124
https://technet.microsoft.com/it-it/library/security/MS15-125
https://technet.microsoft.com/it-it/library/security/MS15-126
https://technet.microsoft.com/it-it/library/security/MS15-127
https://technet.microsoft.com/it-it/library/security/MS15-128
https://technet.microsoft.com/it-it/library/security/MS15-129
https://technet.microsoft.com/it-it/library/security/MS15-130
https://technet.microsoft.com/it-it/library/security/MS15-131
https://technet.microsoft.com/it-it/library/security/MS15-132
https://technet.microsoft.com/it-it/library/security/MS15-133
https://technet.microsoft.com/it-it/library/security/MS15-134
https://technet.microsoft.com/it-it/library/security/MS15-135
Microsoft Knowledge Base
http://support.microsoft.com/kb/3116180
http://support.microsoft.com/kb/3116184
http://support.microsoft.com/kb/3116178
http://support.microsoft.com/kb/3100465
http://support.microsoft.com/kb/3104503
http://support.microsoft.com/kb/3106614
http://support.microsoft.com/kb/3108670
http://support.microsoft.com/kb/3116111
http://support.microsoft.com/kb/3116162
http://support.microsoft.com/kb/3116130
http://support.microsoft.com/kb/3108669
http://support.microsoft.com/kb/3119075
Microsoft Update
http://windowsupdate.microsoft.com
https://www.update.microsoft.com/
http://support.microsoft.com/kb/294871
SANS ISC Diary
https://isc.sans.edu/diary.html?storyid=20461
I riferimenti CVE sono disponibili
nelle segnalazioni originali.
GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iD8DBQFWaVyMwZxMk2USYEIRAhQGAJ0QafgEQhPhqa4KismXisxnyONBBwCgw8dD
JF6CV50lSu0tEiUUW3lX8ZU=
=bQtQ
-----END PGP SIGNATURE-----