Summary
=======
The following CVE and security advisory have been revised in the
November 2017 Security Updates.
* CVE-2017-11882
* ADV170020
Revision Information:
=====================
CVE-2017-11882
– Title: CVE-2017-11882 | Microsoft Office Memory Corruption
Vulnerability
– https://portal.msrc.microsoft.com/en-us/security-guidance
– Reason for Revision: To comprehensively address CVE-2017-11882
Microsoft is releasing security updates 4011604 for affected
editions of Microsoft Office 2007 and 4011618 for affected editions of
Microsoft Office 2010. Microsoft recommends that customers running
these versions of Office install the updates to be protected from
this vulnerability. Customers who have already installed the
previously-released updates (4011276 or 2553204) do not need to
take any further action.
– Originally posted: November 11, 2017
– Updated: November 28, 2017
– CVE Severity Rating: Important
– Version: 2.0
ADV170020
– Title: ADV170020 | Microsoft Office Defense-in-Depth Update
– https://portal.msrc.microsoft.com/en-us/security-guidance
– Reason for Revision: Revised the Affected Products table to include
Microsoft Office Online Server 2016 because the update also provides
enhanced security as a defense-in-depth measure. Microsoft
recommends that customers running Office Online Server 2016 install
update 4011020 for these enhanced security measures.
– Originally posted: November 11, 2017
– Updated: November 28, 2017
– CVE Severity Rating: None
– Version: 2.0
Other Information
=================
Recognize and avoid fraudulent email to Microsoft customers:
=============================================================
If you receive an email message that claims to be distributing
a Microsoft security update, it is a hoax that may contain
malware or pointers to malicious websites. Microsoft does
not distribute security updates via email.
The Microsoft Security Response Center (MSRC) uses PGP to digitally
sign all security notifications. However, PGP is not required for
reading security notifications, reading security bulletins, or
installing security updates. You can obtain the MSRC public PGP key
at <https://technet.microsoft.com/security/dn753714>.
********************************************************************
THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS
PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND. MICROSOFT
DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING
THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT,
INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL
DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY
FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING
LIMITATION MAY NOT APPLY.
********************************************************************
L'articolo Microsoft Security Update Releases proviene da Luciano Blancato - Travel Blogger.