Alert GCSA-14006 - Bollettino di Sicurezza Microsoft Aprile 2014

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

Alert ID : GCSA-13061
Data : 09 Aprile 2014
Titolo : Bollettino di Sicurezza Microsoft Aprile 2014

******************************************************************


:: Descrizione del problema

  Microsoft ha rilasciato 4 bollettini di sicurezza relativi
  a vulnerabilita' presenti nei sistemi operativi Windows
  e in altre applicazioni.

  MS14-017 Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660) 
  MS14-018 Cumulative Security Update for Internet Explorer (2950467)
  MS14-019 Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229)
  MS14-020 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (2950145)

  Maggiori dettagli sono disponibili nella segnalazioni ufficiali
  alla sezione "Riferimenti".


:: Software interessato

  Microsoft Windows
  Microsoft Office
  Internet Explorer
  Microsoft Office Services
  Microsoft Office Web Apps


:: Impatto

  Remote Code Execution


:: Soluzioni

  Installare manualmente le patch indicate nei bollettini Microsoft,
  oppure utilizzare uno degli strumenti di aggiornamento come:
  Aggiornamenti Automatici, Windows Update, Microsoft Update,
  Windows Server Update Services, Systems Management Server.


:: Riferimenti

Microsoft Security Bulletin Summary for April 2014
  http://technet.microsoft.com/en-us/security/bulletin/ms14-apr

Bollettini Microsoft sulla sicurezza
  http://technet.microsoft.com/it-it/security/bulletin/MS14-017
  http://technet.microsoft.com/it-it/security/bulletin/MS14-018
  http://technet.microsoft.com/it-it/security/bulletin/MS14-019
  http://technet.microsoft.com/it-it/security/bulletin/MS14-020

Microsoft Update
  http://windowsupdate.microsoft.com
  https://www.update.microsoft.com/

ISC SANS
  https://isc.sans.edu/diary/April+2014+Microsoft+Patches/17923

Secunia
  http://secunia.com/advisories/57652/
  http://secunia.com/advisories/57586/

Mitre CVE
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1757
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1758
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1761
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0235
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1751
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1752
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1753
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1755
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1760
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0315
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1759

GARR CERT Newsletter subscribe/unsubscribe:
http://testcert.dir.garr.it/index.php/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)

iEYEARECAAYFAlNFJJkACgkQwZxMk2USYEI8bACfU9iZzLF6H+sIxL4K7GU4NcJ9
gksAoI7xgYEC4jcoNSifACC11oHHAkBD
=ojIY
-----END PGP SIGNATURE-----