Alert GCSA-14006 - Bollettino di Sicurezza Microsoft Aprile 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
******************************************************************
Alert ID : GCSA-13061
Data : 09 Aprile 2014
Titolo : Bollettino di Sicurezza Microsoft Aprile 2014
******************************************************************
:: Descrizione del problema
Microsoft ha rilasciato 4 bollettini di sicurezza relativi
a vulnerabilita' presenti nei sistemi operativi Windows
e in altre applicazioni.
MS14-017 Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660)
MS14-018 Cumulative Security Update for Internet Explorer (2950467)
MS14-019 Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229)
MS14-020 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (2950145)
Maggiori dettagli sono disponibili nella segnalazioni ufficiali
alla sezione "Riferimenti".
:: Software interessato
Microsoft Windows
Microsoft Office
Internet Explorer
Microsoft Office Services
Microsoft Office Web Apps
:: Impatto
Remote Code Execution
:: Soluzioni
Installare manualmente le patch indicate nei bollettini Microsoft,
oppure utilizzare uno degli strumenti di aggiornamento come:
Aggiornamenti Automatici, Windows Update, Microsoft Update,
Windows Server Update Services, Systems Management Server.
:: Riferimenti
Microsoft Security Bulletin Summary for April 2014
http://technet.microsoft.com/en-us/security/bulletin/ms14-apr
Bollettini Microsoft sulla sicurezza
http://technet.microsoft.com/it-it/security/bulletin/MS14-017
http://technet.microsoft.com/it-it/security/bulletin/MS14-018
http://technet.microsoft.com/it-it/security/bulletin/MS14-019
http://technet.microsoft.com/it-it/security/bulletin/MS14-020
Microsoft Update
http://windowsupdate.microsoft.com
https://www.update.microsoft.com/
ISC SANS
https://isc.sans.edu/diary/April+2014+Microsoft+Patches/17923
Secunia
http://secunia.com/advisories/57652/
http://secunia.com/advisories/57586/
Mitre CVE
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1757
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1758
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1761
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0235
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1751
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1752
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1753
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1755
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1760
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0315
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1759
GARR CERT Newsletter subscribe/unsubscribe:
http://testcert.dir.garr.it/index.php/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
iEYEARECAAYFAlNFJJkACgkQwZxMk2USYEI8bACfU9iZzLF6H+sIxL4K7GU4NcJ9
gksAoI7xgYEC4jcoNSifACC11oHHAkBD
=ojIY
-----END PGP SIGNATURE-----
Hash: SHA1
******************************************************************
Alert ID : GCSA-13061
Data : 09 Aprile 2014
Titolo : Bollettino di Sicurezza Microsoft Aprile 2014
******************************************************************
:: Descrizione del problema
Microsoft ha rilasciato 4 bollettini di sicurezza relativi
a vulnerabilita' presenti nei sistemi operativi Windows
e in altre applicazioni.
MS14-017 Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660)
MS14-018 Cumulative Security Update for Internet Explorer (2950467)
MS14-019 Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229)
MS14-020 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (2950145)
Maggiori dettagli sono disponibili nella segnalazioni ufficiali
alla sezione "Riferimenti".
:: Software interessato
Microsoft Windows
Microsoft Office
Internet Explorer
Microsoft Office Services
Microsoft Office Web Apps
:: Impatto
Remote Code Execution
:: Soluzioni
Installare manualmente le patch indicate nei bollettini Microsoft,
oppure utilizzare uno degli strumenti di aggiornamento come:
Aggiornamenti Automatici, Windows Update, Microsoft Update,
Windows Server Update Services, Systems Management Server.
:: Riferimenti
Microsoft Security Bulletin Summary for April 2014
http://technet.microsoft.com/en-us/security/bulletin/ms14-apr
Bollettini Microsoft sulla sicurezza
http://technet.microsoft.com/it-it/security/bulletin/MS14-017
http://technet.microsoft.com/it-it/security/bulletin/MS14-018
http://technet.microsoft.com/it-it/security/bulletin/MS14-019
http://technet.microsoft.com/it-it/security/bulletin/MS14-020
Microsoft Update
http://windowsupdate.microsoft.com
https://www.update.microsoft.com/
ISC SANS
https://isc.sans.edu/diary/April+2014+Microsoft+Patches/17923
Secunia
http://secunia.com/advisories/57652/
http://secunia.com/advisories/57586/
Mitre CVE
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1757
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1758
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1761
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0235
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1751
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1752
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1753
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1755
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1760
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0315
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1759
GARR CERT Newsletter subscribe/unsubscribe:
http://testcert.dir.garr.it/index.php/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
iEYEARECAAYFAlNFJJkACgkQwZxMk2USYEI8bACfU9iZzLF6H+sIxL4K7GU4NcJ9
gksAoI7xgYEC4jcoNSifACC11oHHAkBD
=ojIY
-----END PGP SIGNATURE-----